TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

CVE-2020-28185

creationtimestamp| type| source ---|---|--- 2020-12-24 18:55:33+00:00| seen| https://t.me/cibsecurity/21280 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-17...

CVE-2020-28185

CVE-2020-28185 affects TerraMaster TOS (older than or equal to 4.2.06). The vulnerability allows remote, unauthenticated attackers to enumerate valid usernames through the username parameter on wizard/initialise.php. This user enumeration could facilitate targeted credential or further intra-syst...