CVE-2020-26526

—

CVSS 3.1

5.3 medium

EPSS

1%p72

Published

Oct 2, 2020 (Oct 2, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is invalid than when the username is valid ("Unable to find an APIDomain" versus "Wrong email or password").

Vendors: damstratechnology
Products: smart asset
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.