Description
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system.
Unscored
CVE-2021-35060
EUVD-2021-21705GHSA-j379-3r55-f3wq
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover wheth…
Published Oct 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre