Security Advisory

CVE-2021-46434

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-28 11:10:15
Last updated 2024-08-04 05:02:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid