Description
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
References
- 1019566 vdb-entry
- clearquest-username-information-disclosure(41042) vdb-entry
- 29280 third-party-advisory
- PK55561 vendor-advisory
- 28132 vdb-entry
- ADV-2008-0804 vdb-entry