CVE-2024-33856

An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the response time at the Forgot Password endpoint. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt