How to mitigate or resolve the campus username enumeration vulnerability
2025-03-29 15:47:40
Published
- 0 Followed
- 0Collected ，4Browsed
Problem Description
Software version: AD Campus E6505P19 EIA E6225
Vulnerability details: When different usernames are entered, the current system returns different error messages based on the username, allowing attackers to determine whether a user exists in the system. Subsequently, password brute-force attacks can be performed using the identified usernames.
Remediation suggestion:It is recommended to modify the error message displayed on the page.
Process Analysis
Resolved in EIA version E6607P02
Solution
Upgrade to EIA version E6607P02