Username enumeration weakness in Apache Tomcat Form in Apple Mac OS X via an unanticipated oplock break notification reply packet| ID: oval:org.secpod.oval:def:3852 | Date: (C)2012-01-20 (M)2023-11-09 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS X Server before 10.6.3 and is prone to an username enumeration vulnerability. A flaw is present in the application, since it displays different responses to login attempts, depending on whether or not the username exists. Successful exploitation could allow remote attackers to discern valid usernames.
| Platform: |
| Apple Mac OS X Server 10.5 |
| Apple Mac OS X Server 10.6 |
