How severe is CVE-2024-9513?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 3.7 out of 10.

What type of vulnerability is CVE-2024-9513?

This is classified as CWE-203, which is a common weakness in software security.

CVE-2024-9513 - MEDIUM Severity | CVSS 3.7

Vulnerability Description

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument username leads to information exposure through discrepancy. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure is planning to release a fix in mid-October 2024.

Related Vulnerabilities

CVE-2019-11743

LOW

CVSS:3.7(Low)

Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to o...

CWE-2032019

CVE-2019-1563

LOW

CVSS:3.7(Low)

In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recove...

CWE-2032019

CVE-2020-1968

LOW

CVSS:3.7(Low)

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphers...

CWE-2032020

CVE-2020-3585

LOW

CVSS:3.7(Low)

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an unauth...

CWE-2032020

CVE-2020-9389

LOW

CVSS:3.7(Low)

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a diff...

CWE-2032020

CVE-2021-29687

LOW

CVSS:3.7(Low)

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018

CWE-2032021