PT-2020-16940

Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions 4.2.06 and earlier Description The issue allows remote unauthenticated attackers to identify valid users within the system. This is achieved via the username parameter to the "wizard/initialise.php" endpoint...