| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine password manager pro | = 11.2< 11.2 | 11.2 |
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free