[20201105] - Core - User Enumeration in backend login (CVE-2020-35614)

Summary

[20201105] - Core - User Enumeration in backend login

Original description

The description as published by the source.

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"last_affected":"3.9.22"}]}]

References

advisory developer.joomla.org
web nvd.nist.gov