2010-04-07 15:00:00
mitre
PUBLISHED
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.