CVE-2015-7680

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit DMZ versions prior to 8.2

Description The issue allows remote attackers to enumerate usernames by analyzing different error messages for authentication attempts, depending on whether the user account exists. This can be achieved via a series of SOAP requests to the "machine.aspx" API endpoint.

Recommendations For versions prior to 8.2, update to version 8.2 or later to resolve the issue.