Security Advisory
CVE-2023-30458
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.