| Package | Affected versions | Patched versions |
|---|---|---|
| gim | < 2025-04-01 | 2025-04-01 |
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in '/WS/PDAWebService.asmx'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free