Passrecovery vulnerabilities
1 known vulnerability in Passrecovery from Arandasoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Passrecovery: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.