[20201105] - Core - User Enumeration in backend login(CVE-2020-35614)

概要

[20201105] - Core - User Enumeration in backend login

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"last_affected":"3.9.22"}]}]

参照URL

advisory developer.joomla.org
web nvd.nist.gov