CVE-2020-28918

DualShield 5.9.8.0821 allows username enumeration on its login form

Medium · published February 16, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01083 · 64.9th percentile
Published
2021-02-16T19:57Z
EPSS history
Timeline
  • 16 FEB 19:57Z
    DualShield 5.9.8.0821 allows username enumeration on its login form
    cvelistv5