{ "id": "CVE-2022-30076", "sourceIdentifier": "cve@mitre.org", "published": "2023-04-16T03:15:07.230", "lastModified": "2023-04-17T13:12:43.170", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting." } ], "metrics": {}, "references": [ { "url": "http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html", "source": "cve@mitre.org" } ] }