Skip to content
OpenAdvisories
Low · 3.7 CVE-2025-67806 EUVD-2025-209166GHSA-7h2g-p6hq-vh75

The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing a…

Published Apr 1, 2026 · Updated May 10, 2026 · Assigned by mitre

Description

The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behavior in newer versions.

References