CVE-2023-40725

MEDIUM Year: 2023
CVSS v3 Score
4.0
Medium
Weakness Type
CWE-209
View all →

Vulnerability Description

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.

Related Vulnerabilities

CVE-2025-23185

MEDIUM
CVSS:4.1(Medium)

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an a...

CWE-2092025

CVE-2020-16128

LOW
CVSS:3.8(Low)

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu...

CWE-2092020

CVE-2024-6984

LOW
CVSS:3.8(Low)

An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local cha...

CWE-2092024

CVE-2014-8161

MEDIUM
CVSS:4.3(Medium)

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constra...

CWE-2092014

CVE-2017-0885

MEDIUM
CVSS:4.3(Medium)

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-on...

CWE-2092017

CVE-2018-17891

LOW
CVSS:3.7(Low)

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users ...

CWE-2092018