The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
References
Configurations
Information
Published : 2009-05-22 11:30
Updated : 2009-09-08 21:00
NVD link : CVE-2009-1769
Mitre link : CVE-2009-1769
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
ocsinventory-ng
- ocs_inventory_ng