SA-2023-032 - AMI-BMC User Enumeration (CVE-2022-2827)
Summary By making a password reset request, and manipulating a vulnerable parameter, it can be determined if the user exists or not. The vulnerability opens the door to enumerate account names on the ...