high7.5
CVE-2004-1697
The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and …
Impact
The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109579952809320&w=2
- http://secunia.com/advisories/12620
- http://www.securityfocus.com/bid/11229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17464
- http://marc.info/?l=bugtraq&m=109579952809320&w=2
- http://secunia.com/advisories/12620
- http://www.securityfocus.com/bid/11229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17464