Summary: TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.Published: Tuesday, September 10, 2019 - 17:15cvss: