Executive Summary

CVE-2025-67806 is a user enumeration vulnerability in the login mechanism of Sage DPW versions before 2021_06_000. The login system displays different responses for valid and invalid usernames, which allows attackers to determine whether a username exists in the system.

This behavior enables unauthenticated attackers to enumerate valid user accounts by analyzing the distinct error messages or responses during login attempts.

In newer versions, on-premise administrators can toggle this behavior to prevent user enumeration.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to identify valid usernames on the affected Sage DPW system without authentication.

Knowing valid usernames can facilitate further targeted attacks such as phishing, password guessing, or brute force attacks.

Although the CVSS v3.1 score is low (3.7), the vulnerability can still aid attackers in gathering information that compromises user privacy and system security.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by observing the login mechanism responses for differences between valid and invalid usernames. An attacker or tester can attempt to log in with various usernames and analyze the distinct error messages or responses returned by the system to determine if user enumeration is possible.

Specific commands are not provided in the available information, but a common approach would be to use automated scripts or tools to send login requests with different usernames and analyze the response messages or HTTP status codes to identify discrepancies indicating valid accounts.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include upgrading to a version of Sage DPW newer than 2021_06_000 where the vulnerability is addressed.

For on-premise installations, administrators can toggle the login mechanism behavior to disable distinct responses for valid and invalid usernames, thereby preventing user enumeration.

Additionally, monitoring and restricting login attempts and implementing strong access controls can help reduce the risk.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated attackers to enumerate valid usernames by exploiting distinct responses in the login mechanism. This user enumeration can potentially aid further targeted attacks, which may lead to unauthorized access attempts.

While the provided information does not explicitly mention compliance impacts, user enumeration vulnerabilities can increase the risk of data breaches or unauthorized access, which may affect compliance with standards like GDPR or HIPAA that require protection of personal and sensitive information.

Mitigation options exist in newer versions where on-premise administrators can toggle the behavior to reduce this risk.

Useful 0 Not Useful 0