Vulnerability in Ergon Informatik Ag Airlock Iam

CVE-2025-6056

Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.

EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.