A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.
CPE | Name | Operator | Version |
---|---|---|---|
medicine_tracker_system | eq | 1.0 |