CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. See the original NVD description below for full technical details.
CVE
CVE-2021-33617
Severity
MEDIUM
CVSS
5.3
EPSS
2.05%
Original NVD Description
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid.
Related CVEs
Other vulnerabilities affecting the same vendor(s)