| Package | Affected versions | Patched versions |
|---|---|---|
| jana web server | = 1.0= 1.45= 1.46= 2.0= 2.0_beta1= 2.0_beta2= 2.2.1 |
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free