CVE-2020-23283

Name of the Vulnerable Software and Affected Versions mConnect application version v02.001.00

Description The issue allows an attacker to discover valid users from the application's database through brute force. This is due to information disclosure in the Logon Page of the mConnect application.

Recommendations For version v02.001.00, consider temporarily restricting access to the Logon Page until a fix is available. As a mitigation measure, restrict brute force attempts on the login functionality to minimize the risk of exploitation.