CVE-2020-23283

EUVD-2020-16031
Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
mvmconnect
02.001.00
mvmconnect
2013.1.6.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/ifmacedo/mconnect/blob/main/bruteforce
https://www.linkedin.com/pulse/descobrindo-usu%C3%A1rios-brute-force-iran/
https://github.com/ifmacedo/mconnect/blob/main/bruteforce
https://www.linkedin.com/pulse/descobrindo-usu%C3%A1rios-brute-force-iran/