CVE-2017-12849: Silverstripe CMS User Enumeration

The vulnerability stems from measurable timing differences in user existence checks during authentication flows. The SecurityController methods handle form submissions while Member class methods implement security-critical operations. Pre-patch implementations would execute different code paths (password hashing/email sending) based on user validity, creating observable timing variances. These functions directly process sensitive authentication operations and would appear in stack traces during exploitation attempts.