Django User Account Enumeration Information Disclosure Vulnerability

Bugtraq ID:	61385
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 22 2013 12:00AM
Updated:	Jul 23 2013 04:54PM
Credit:	Salvatore Bonaccorso
Vulnerable:
Not Vulnerable:

Django User Account Enumeration Information Disclosure Vulnerability

Django is prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow attackers to enumerate the user names of system accounts. Information obtained may aid in further attacks.

Django User Account Enumeration Information Disclosure Vulnerability

Attacker can exploit this issue using a browser.

Django User Account Enumeration Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Django User Account Enumeration Information Disclosure Vulnerability

References:

• Django Homepage (Django)