CVE-2000-1030

CVE-2000-1030

EPSS 1.6%

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/5529 http://www.securityfocus.com/archive/1/142672 http://www.securityfocus.com/bid/1888