ESET Protect User Enumeration Vulnerability via Response Timing

A user enumeration vulnerability has been identified in ESET Protect (on-prem) that exploits response timing differences. This vulnerability allows an attacker to determine valid usernames by analyzing the time it takes for the server to respond during the authentication process.

Impact

Exploitation of this vulnerability could lead to user enumeration, allowing attackers to identify valid usernames which could be used in further attacks, such as password guessing or phishing.