CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

CVE-2004-1697

The CVE-2004-1697 issue affects CA Unicenter Management Portal versions 2.0 and 3.1, where the Forgot your Password link reveals different error messages for existing vs non-existing usernames, enabling remote username guessing. Underlying cause is information disclosure through authentication er...

CA UniCenter Management Portal Username Enumeration Vulnerability

CA UniCenter Management Portal Username Enumeration Vulnerability Package: CA UniCenter Management Portal Vendor Web Site: http://www.ca.com Versions: UniCenter Management Portal 2.0 and 3.1 Platform: Windows Local: No Remote: Yes Fix Available: Yes Advisory Author: Thomas Adams...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...