| Package | Affected versions | Patched versions |
|---|---|---|
| corporatetime for the web | ≤ 2.1.2 |
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free