Detections
Analytics
CVE-2020-13461
medium
Description
Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: "This attack requires access to the internal network. If an attacker is part of the internal network, they do not require access to TOS to know the usernames".
References
https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md