CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

2.57% chance of exploitation in the next 30 days, 84th percentile

Nuclei

medium · CWE-209

Published

2024-10-16

Updated

2024-10-17

Proof-of-concept exploits (1)

• arbaaz29/CVE-2024-44762-webmin-userenum

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/52254
• https://www.exploit-db.com/exploits/52114

References

• CVE Record
• NVD entry

Related

• CVE-2023-31902
• CVE-2024-4475
• CVE-2024-44765
• CVE-2024-4474
• CVE-2024-4477
• CVE-2024-44728