CVE-2004-1697

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-09-21 · updated 2026-06-16

Description

The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.

References

http://marc.info/?l=bugtraq&m=109579952809320&w=2
http://secunia.com/advisories/12620
http://www.securityfocus.com/bid/11229
https://exchange.xforce.ibmcloud.com/vulnerabilities/17464
http://marc.info/?l=bugtraq&m=109579952809320&w=2
http://secunia.com/advisories/12620
http://www.securityfocus.com/bid/11229
https://exchange.xforce.ibmcloud.com/vulnerabilities/17464

Get alerted when CVE-2004-1697 or the next vulnerability affects your stack