| Package | Affected versions | Patched versions |
|---|---|---|
| aqualogic interaction | = 5.0.2= 5.0.3= 5.0.4= 6.0.1.218452 |
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free