CVE-2020-28185

Medium · 5.3

CVSS

5.3

EPSS

18.3%

Published

Dec 24, 2020

CISA due date

—

The record

User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php.

Affected packages

Ecosystem	Package	Introduced	Fixed