[20201105] - Core - User Enumeration in backend login

CVE-2020-35614

5.3MEDIUM

Key Information

Vendor: Joomla
Status: Joomla! Cms
Vendor: CVE Published:; 28 December 2020

Summary

An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.

Affected Version(s)

Joomla! CMS = 3.9.0-3.9.22

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Dec 28, 2020
Vulnerability Reserved.
Dec 21, 2020

Collectors

NVD DatabaseMitre Database