Description
NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 25476 vdb-entry
- 20075 third-party-advisory
- whatsup-login-username-enumeration(26503) vdb-entry