The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2004-1691 | The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T01:00:37.239Z
Reserved: 2005-02-21T00:00:00
Link: CVE-2004-1697
No data.
Status : Deferred
Published: 2004-09-21T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2004-1697
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD