CVE-2023-3897 Information

Description

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

This issue affects SureMDM On-premise: 6.31 and below version 

Reference

https://www.42gears.com/security-and-compliance