medium5.3
CVE-2020-28185
User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username …
Impact
User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Tos | through 4.2.06 |