VULNERABILITY INTELLIGENCE
CVE-2024-11084
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-04-15
Last modified2026-06-17
Description
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.
Weakness classification
- security@puppet.com: CWE-203