| Package | Affected versions | Patched versions |
|---|---|---|
| secret server | = 11.4.000000 |
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses from the /oauth2/token endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free