Description
A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts
(in case of the usage of a wrong password or a non existent user). The difference in the
returned error messages could be used by attackers to understand whether a
certain user is registered in the Identity Manager.
This issue affects Life 1st: 1.5.2.14234.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beta80 | Life 1st | 1.5.2.14234 | — |
References
- https://www.cvcn.gov.it/cvcn/cve/CVE-2025-26485 government-resource
- https://euvd.enisa.europa.eu/vulnerability/CVE-2025-26485 vdb-entry