maqetta/maqetta — Issue #1133: Security: username leakage
Author: childsb
Created: 2011-11-02 16:00:15+00:00
State: open

The server sends 2 responses depending on if the user is known, but the password is invalid or if the user isn't in the system. An attacker could use this information to find out user names in the system.