CVE-2020-35398

CVE-2020-35398 affects the UTI Mutual fund Android app (versions 5.4.18 and earlier). The issue allows brute-forcing username enumeration via the error message shown after invalid credentials, enabling attackers to identify valid usernames. Documents consistently describe the vulnerability as an ...