EIP-2026-102396

The document describes a username enumeration vulnerability in LogicalDOC Enterprise versions 7.7.4 and below, where the 'j_spring_security_check' endpoint returns different HTTP responses for valid and invalid usernames, allowing attackers to enumerate valid users.