CASE PM-51902-19-201545:

Previously, on the console ASMSAdministrator, when trying to log in or recover password with an invalid user, the response stated No username found, which allowed users to be discarded and potentially obtain a list of valid users.

One adjustment was made. Now, when trying to log in with an invalid user or when trying to recover the password, the response specifies Incorrect username or password.

⚐ Note: This improvement also applies to consoles Specialist and Customer.