The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-02-20T05:00:00
Updated: 2024-08-08T01:00:37.239Z
Reserved: 2005-02-21T00:00:00
Link: CVE-2004-1697
Vulnrichment
No data.
NVD
Status : Modified
Published: 2004-09-21T04:00:00.000
Modified: 2024-11-20T23:51:31.500
Link: CVE-2004-1697
Redhat
No data.