medium5.0
CVE-2008-1166
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Impact
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flyspray | Flyspray | Versions 0.9.9, 0.9.9.1, 0.9.9.2, 0.9.9.3, 0.9.9.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29215
- http://www.securityfocus.com/archive/1/489020/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40964
- http://secunia.com/advisories/29215
- http://www.securityfocus.com/archive/1/489020/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40964