Vulnerability in Six Apart Movable Type

CVE-2005-3101

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Six_apart Movable_type — versions 3.17
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)