PT-2026-60760
CVE-2024-23574
·
Published
2026-07-17
·
Updated
2026-10-02
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HCL Aftermarket EPC (affected versions not specified)
Description
A flaw allows a malicious actor to use brute-force techniques to guess or confirm the existence of valid users in the system. This process is known as user enumeration, which occurs when an attacker can systematically verify valid usernames through repeated attempts.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾