CVE-2018-1000549: Infoleak
Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pages that can result in A remote attacker could perform a brute force attack to obtain valid usernames and email addresses.. This attack appear to be exploitable via HTTP Request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000549?
CVE-2018-1000549 is classified as a moderate severity vulnerability due to its potential for exploitation through brute force attacks.
How do I fix CVE-2018-1000549?
To fix CVE-2018-1000549, update Wekan to a version newer than 1.04.0 which addresses this vulnerability.
What type of attack is associated with CVE-2018-1000549?
CVE-2018-1000549 is associated with an email and username enumeration attack that can be exploited via HTTP requests.
Who is affected by CVE-2018-1000549?
CVE-2018-1000549 affects all users of Wekan version 1.04.0.
What can attackers achieve with CVE-2018-1000549?
Attackers can use CVE-2018-1000549 to brute force valid usernames and email addresses from the affected application.