CVE Catalog
CVE-2023-3897
MediumCVSS 4.8Exploitation Probability (EPSS)
High risk1.81%
76th percentile - higher than 76% of all known CVEs
Summary
Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.
Risk Assessment
An attacker could exploit this vulnerability to gather user information, potentially leading to further attacks on the system.
Recommendation
It is recommended to upgrade to SureMDM version above 6.31 and implement additional security measures to protect against user enumeration.
Original NVD description (English source)
Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version