← Database

CVE-2000-1030

MEDIUM CVSS: 5.0 Published: 2000-12-11 Modified: 2026-06-16

Description

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

Affected Platforms

Csandt Corporatetime For The Web

Weakness Type

NVD-CWE-Other

References