CVE-2013-6020

MEDIUM 5.8CVE-2013-6020 · Published 28/10/2013 · updated 16/06/2026

In short

CVE-2013-6020 is a MEDIUM (CVSS 5.8) vulnerability affecting taxweb (tylertech).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
taxweb tylertech	`= 3.13.3.1`	No fix yet

Description

passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the (1) Assessor, (2) Recorder, or (3) Treasurer application.

References

kb.cert.org/vuls/id/911678 · US Government Resource

More vulnerabilities in taxweb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free