Description
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.
Unscored
CVE-2020-35398
EUVD-2020-23072GHSA-gmf8-m925-g3q7
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames d…
Published Dec 23, 2021 · Updated Aug 4, 2024 · Assigned by mitre