CVE-2025-67806
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
The login mechanism of Sage DPW 2021_06_004 returns distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behavior in newer versions.
Risk Assessment
An attacker can determine valid usernames, facilitating brute-force and phishing attacks. This information leak increases the risk of unauthorized access to the system.
Recommendation
Update Sage DPW to version 2021_06_000 or later and enable uniform login responses. Consider implementing additional protections against brute-force attacks.
Other vulnerabilities in Sage DPW
See all- CVE-2025-67807Medium
The login mechanism of Sage DPW 2025_06_004 returns distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behavior in newer versions.
- CVE-2025-67805Medium
A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints in the Database Monitor feature, exposing sensitive information such as hashes and table names. The feature is disabled by default, never available in Sage DPW Cloud, and was forcibly disabled again in version 2025_06_003.
Original NVD description (English source)
The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behavior in newer versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS