@krader on WordPress.org
Created ticket #41808 on Core Trac:Attacks against wp.getUsersBlogs with no user name but with a password