Username enumeration via password-reset timing discrepancy

Observable response discrepancy in Logpoint SIEM before 7.4.0 allows remote attackers to enumerate valid usernames. The Forgot Password endpoint takes measurably different amounts of time depending on whether the submitted username exists, exposing account validity through a timing oracle. No authentication or user interaction is required, and the disclosed consequence is limited to account-name exposure rather than credential or system access.