Security Advisory

CVE-2020-9389

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-02-03 19:03:47
Last updated 2024-08-04 10:26:16
Assigner mitre
State PUBLISHED

Description

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames.