login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Casebook |
Ringtail |
6.1.0 (including) |
6.1.0 (including) |
References