Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-15392. PoCs published by inflixim4be.
AI-analyzed exploit summary This repository documents a user enumeration vulnerability in Supravizio BPM 10.1.2, where differential error messages during password recovery allow attackers to determine valid users. The PoC includes screenshots demonstrating the behavior for valid and invalid users.
Description
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames.
Exploits (1)
This repository documents a user enumeration vulnerability in Supravizio BPM 10.1.2, where differential error messages during password recovery allow attackers to determine valid users. The PoC includes screenshots demonstrating the behavior for valid and invalid users.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N