[20201105] - Core - User Enumeration in backend login (CVE-2020-35614)

Résumé

[20201105] - Core - User Enumeration in backend login

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"last_affected":"3.9.22"}]}]

Références

advisory developer.joomla.org
web nvd.nist.gov