{"id":"CVE-2024-44762","aliases":["EUVD-2024-41095","GHSA-9jg2-v5f3-rqf2"],"status":"published","title":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows...","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.02566,"percentile":0.85245,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-209"],"published":"2024-10-16T00:00:00Z","modified":"2026-10-28T02:31:02Z","exploits":[{"source":"exploitdb","id":"EDB-52114","title":"Webmin Usermin 2.100 - Username Enumeration","type":"webapps","platform":"perl","date":"2025-04-03","url":"https://www.exploit-db.com/exploits/52114"},{"source":"exploitdb","id":"EDB-52254","title":"Usermin 2.100 - Username Enumeration","type":"webapps","platform":"multiple","date":"2025-04-17","url":"https://www.exploit-db.com/exploits/52254"},{"source":"nuclei","id":"CVE-2024-44762","title":"Usermin 2.100 - Username Enumeration","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml"},{"source":"pocgithub","id":"arbaaz29/CVE-2024-44762-webmin-userenum","title":"arbaaz29/CVE-2024-44762-webmin-userenum","date":"2025-12-27","url":"https://github.com/arbaaz29/CVE-2024-44762-webmin-userenum"}],"products":[{"vendor":"webmin","product":"usermin"}],"references":[{"url":"https://senscybersecurity.nl/cve-2024-44762-explained/","tags":["Exploit","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44762","tags":["advisory"]},{"url":"https://senscybersecurity.nl/cve-2024-44762-explained"},{"url":"https://github.com/advisories/GHSA-9jg2-v5f3-rqf2"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44762.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-44762","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","status":"published","published":"2024-10-16T00:00:00Z","modified":"2024-10-17T16:39:31.013Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-41095","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","status":"published","published":"2024-10-16T00:00:00Z","modified":"2024-10-17T16:39:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-9jg2-v5f3-rqf2","title":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows...","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","status":"published","published":"2024-10-16T21:31:09Z","modified":"2024-10-17T18:32:39Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:58:32.565259Z"}],"nvd":[{"id":"CVE-2024-44762","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","status":"published","published":"2024-10-16T21:15:12.68Z","modified":"2026-06-17T07:53:05.447Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:10:32.45889Z"}],"osv":[{"id":"CVE-2024-44762","description":"A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.","status":"published","published":"2024-10-16T00:00:00Z","modified":"2026-10-28T02:31:02.198337474Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:42.322107Z"}]}}