login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Casebook | Ringtail | 6.1.0 (including) | 6.1.0 (including) |
References
