What is CVE-2020-35398?

CVE-2020-35398 is a medium-severity vulnerability in Utimf Uti Mutual Fund Invest Online, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2021-12-23.

How severe is CVE-2020-35398?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Utimf Uti Mutual Fund Invest Online

CVE-2020-35398

An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.

EPSS: 0.011 (62.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Utimf Uti_mutual_fund_invest_online
N/a — versions n/a

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

References

cve@mitre.org (Product, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-35398?: CVE-2020-35398 is a medium-severity vulnerability in Utimf Uti Mutual Fund Invest Online, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2021-12-23.
How severe is CVE-2020-35398?: Medium severity. CVSS v3 base score is 5.3 out of 10.