Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Secure_global_desktop | Tarantella | enterprise_3.42 (including) | enterprise_3.42 (including) |
| Secure_global_desktop | Tarantella | enterprise_4.0 (including) | enterprise_4.0 (including) |
| Tarantella_enterprise | Tarantella | 3.30 (including) | 3.30 (including) |
| Tarantella_enterprise | Tarantella | 3.40 (including) | 3.40 (including) |