Description
H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hangzhou H3C Technologies | H3C SSL VPN | 1.1 | — |
References
- ExploitDB-50742 exploit
- H3C Official Product Homepage product
- Zero Science Lab Disclosure (ZSL-2022-5697) third-party-advisory
- VulnCheck Advisory: H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification third-party-advisory