CVE-2021-45901

Medium

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the…

mitre·CWE-203·Published 2022-02-10

CVSS

5.3

EPSS

0.14

KEV

Exploits

cve.orgen

151 chars

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

NVDen

151 chars

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

NVDes

200 chars

El formulario de restablecimiento de la contraseña en ServiceNow Orlando proporciona diferentes respuestas a los intentos de autenticación no válidos dependiendo de si el nombre de usuario se presenta

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N