Description
Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ergon Informatik | Airlock IAM | 7.7.9 – ≤ 7.7.10, 8.0.8, 8.1.7, 8.2.4, 8.3.1 | 8.4.1 |