Unrated severityNVD Advisory· Published Dec 11, 2000· Updated Jun 16, 2026

CVE-2000-1030

Description

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

Affected products

Csandt/Corporatetime For The Web
cpe:2.3:a:csandt:corporatetime_for_the_web:*:*:*:*:*:*:*:*
Range: <=2.1.2
CS&T/CorporateTime for the Webllm-create

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/1888nvdVendor Advisory
www.securityfocus.com/archive/1/142672nvd
exchange.xforce.ibmcloud.com/vulnerabilities/5529nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000