2019-09-10 20:51:05
mitre
PUBLISHED
TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.