Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMQ X 安全漏洞
Vulnerability Description
EMQ X是一个完全开源、高度可扩展、高可用的分布式 MQTT 消息代理。适用于物联网、M2M 和移动应用程序，可处理数千万并发客户端。 EMQ X Dashboard V3.0.0版本存在安全漏洞，该漏洞源于受“/api /v3/auth”接口中的用户名枚举影响。当用户登录时，应用程序会根据帐户是否正确从而返回不同的结果，攻击者利用该漏洞可以确定给定的用户名是否有效。
CVSS Information
N/A
Vulnerability Type
N/A