CVE-2010-3979: Exposure of Sensitive Information to an Unauthorized Actor

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI...

PT-2010-5211

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise XI version 3.2 Description The issue allows remote attackers to enumerate account names by generating different error messages depending on whether the Login field corresponds to a valid username. This can be don...