CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
References
Configurations
History
20 Nov 2024, 23:33
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/archive/1/142672 - | |
References | () http://www.securityfocus.com/bid/1888 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/5529 - |
Information
Published : 2000-12-11 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2000-1030
Mitre link : CVE-2000-1030
CVE.ORG link : CVE-2000-1030
JSON object : View
Products Affected
csandt
- corporatetime_for_the_web
CWE