CVE-2018-17368
An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easie…
Published: 2018-09-23 · CVSS: Unscored
An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7