CVE-2020-13461

Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: "This attack requires access to the internal network. If an attacker is part of the internal network, they do not require access to TOS to know the usernames".

• https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.mdThird Party Advisory
• https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.mdThird Party Advisory

Published

Feb 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13451An incomplete-cleanup vulnerability in the Office rendering …9.8
• CVE-2020-13452In Gotenberg through 6.2.1, insecure permissions for tini (w…9.8
• CVE-2020-13458An issue was discovered in the Image Resizer plugin before 2…8.8
• CVE-2020-13459An issue was discovered in the Image Resizer plugin before 2…5.4
• CVE-2020-1346An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-13460Multiple Cross-Site Request Forgery (CSRF) vulnerabilities w…8.8
• CVE-2020-13462Insecure Direct Object Reference (IDOR) exists in Tufin Secu…5.7
• CVE-2020-13463The flash memory readout protection in Apex Microelectronics…4.6
• CVE-2020-13464The flash memory readout protection in China Key Systems & I…4.2
• CVE-2020-13465The security protection in Gigadevice GD32F103 devices allow…6.8
• CVE-2020-13466STMicroelectronics STM32F103 devices through 2020-05-20 allo…6.8
• CVE-2020-13467The flash memory readout protection in China Key Systems & I…4.6