CVE-2008-1166

Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames

published March 5, 2008

CVSS
—
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01205 · 68.1th percentile
Published
2008-03-05T23:00Z
EPSS history
Timeline
  • 05 MAR 23:00Z
    Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames
    cvelistv5