CVE-2022-24032

Name of the Vulnerable Software and Affected Versions Adenza AxiomSL ControllerView versions through 10.8.1

Description The issue allows an attacker to identify valid usernames on the platform due to a difference in error messages produced by failed login attempts when the username is valid.

Recommendations For Adenza AxiomSL ControllerView versions through 10.8.1, consider modifying the login error messages to be uniform, regardless of the username's validity, to prevent user enumeration. As a temporary workaround, restrict access to the login functionality to minimize the risk of exploitation.