CVE-2024-48533

Summary

CVE-2024-48533 is a vulnerability affecting the Forgot your Login? module in eSoft Planner version 3.24.08271-USA. The issue arises from inconsistent responses given by the system for valid and invalid email addresses. This discrepancy enables attackers to enumerate valid user email accounts through a targeted attack, potentially leading to unauthorized access or account takeover attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.