CVE-2021-46434

EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface

published March 28, 2022

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Published
2022-03-28T11:10Z
EPSS history
Timeline
  • 28 MAR 11:10Z
    EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface
    cvelistv5