CVE-2019-12943

TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names...

CVE-2019-12943

The CVE-2019-12943 entry concerns TTLock devices where password-reset attempts are not properly restricted, causing incorrect access control and disclosure of valid account names. Affected product: TTLock devices. Root cause: insufficient restrictions on password-reset flow. Impact: potential acc...