CVE-2020-25200

CVE-2020-25200 describes a username enumeration vulnerability in Pritunl 1.29.2145.25, where an attacker can discern valid VPN usernames by observing differing server responses (error 400 vs. 401) after a series of login attempts. This medium-severity vulnerability has a CVSS score of 5.3, indicating low impact on confidentiality and no impact on integrity or availability, with a network attack vector and low attack complexity. While the vendor disputes it as a vulnerability, a Nuclei template exists for detection, but there is no evidence of active exploitation, Metasploit modules, or significant community discussion.