Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnerability affects all Kirby sites with user accounts unless Kirby's API and Panel are disabled in the config. It can only be exploited for targeted attacks because the attack does not scale to brute force. The problem has been patched in Kirby 3.5.8.2, Kirby 3.6.6.2, Kirby 3.7.5.1, and Kirby 3.8.1. In all of the mentioned releases, the maintainers have rewritten the affected code so that the delay is also inserted after the brute force limit is reached.

CVE-2022-39315 is a user enumeration vulnerability affecting the Kirby Content Management System (CMS) in versions prior to 3.5.8.2, versions from 3.6.0 up to but not including 3.6.6.2, versions from 3.7.0 up to but not including 3.7.5.1, and version 3.8.0. The vulnerability arises from an observable response discrepancy (CWE-204) in the Kirby API and Panel components, which are used to manage user accounts and content. Specifically, the system's responses differ in a way that allows an attacker to determine valid usernames by analyzing timing differences or response content, enabling user enumeration. This flaw does not scale well for brute force attacks due to built-in rate limiting and delays, but it can be exploited in targeted attacks to identify valid user accounts. The vulnerability has been addressed in Kirby versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, where the affected code was rewritten to insert delays even after brute force limits are reached, mitigating timing-based user enumeration. Exploitation does not require authentication but does require the API and Panel to be enabled in the configuration. There are no known exploits in the wild, and the vulnerability primarily impacts confidentiality by exposing valid usernames, which could be leveraged in subsequent targeted attacks such as phishing or password guessing.

Detailed information about CVE-2022-39315: CWE-204: Observable Response Discrepancy in getkirby kirby affecting getkirby kirby. Get real-time updates, technical

CVE-2022-39315: CWE-204: Observable Response Discrepancy in getkirby kirby - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-39315: CWE-204: Observable Response Discrepancy in getkirby kirby

A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time that are returned by the affected system to determine which accounts are valid user accounts. Affected systems are only vulnerable if they have LDAP configured.

The affected URI is /internal_forms_authentication/ the response time of the form is longer if the supplied user does not exists and shorter if the user exists.

CVE-2022-0564 is a vulnerability identified in Qlik Sense Enterprise on Windows, specifically affecting version 14.x when LDAP authentication is configured. The vulnerability arises from an observable response discrepancy in the authentication mechanism at the URI endpoint /internal_forms_authentication/. An attacker can exploit this by sending authentication requests with different usernames and measuring the response times. The system responds faster when the username exists and slower when it does not, allowing an attacker to enumerate valid domain user accounts remotely without authentication. This side-channel timing attack leverages the difference in processing time to distinguish between valid and invalid usernames, potentially aiding further targeted attacks such as brute force or social engineering. The vulnerability is categorized under CWE-204 (Observable Response Discrepancy), which involves information leakage through timing differences. No known exploits have been reported in the wild, and no official patches have been linked, indicating that mitigation may require configuration changes or vendor updates. The vulnerability does not require user interaction or prior authentication, increasing its risk profile. However, the impact is limited to user enumeration and does not directly allow privilege escalation or code execution.

Detailed information about CVE-2022-0564: CWE-204: Observable Response Discrepancy in Qlik Sense Qlik Sense Enterprise on Windows affecting Qlik Sense Qlik Sens

CVE-2022-0564: CWE-204: Observable Response Discrepancy in Qlik Sense Qlik Sense Enterprise on Windows - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'cwe-204-observable-response-discrepancy'

Filter Threats

Threats Tagged 'cwe-204-observable-response-discrepancy'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility