| Package | Affected versions | Patched versions |
|---|---|---|
| gim | < 2025-04-01 | 2025-04-01 |
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free