NetSight
medium5.0

CVE-2006-6052

NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate …

Impact

NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.

Affected products

VendorProductAffected versions
Netepi Case ManagerNetepi Case Manager
Versions 0.93, 0.94, 0.95, 0.96, 0.97

References