CVE-2023-3897

Name of the Vulnerable Software and Affected Versions SureMDM On-premise versions 6.31 and below

Description The issue allows for username enumeration through bypassing CAPTCHA in the On-premise SureMDM Solution on Windows deployment. This enables an attacker to enumerate local user information via an error message.

Recommendations For versions 6.31 and below, update to a version above 6.31 to resolve the issue. As a temporary workaround, consider restricting access to the error message that reveals local user information to minimize the risk of exploitation.