PT-2020-9832

CVE-2019-16516

·

Published

2020-01-23

·

Updated

2022-02-20

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions ConnectWise Control versions 19.3.25270.7185
Description An issue was discovered that allows an unauthenticated attacker to determine with certainty if an account exists for a given username, due to a user enumeration vulnerability.
Recommendations For version 19.3.25270.7185, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-203: Observable Discrepancy
Related identifiers
CVE-2019-16516
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com