VULNERABILITY INTELLIGENCE
CVE-2025-6056
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-07-04
Last modified2026-06-17
Description
Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.
Weakness classification
- vulnerability@ncsc.ch: CWE-203