TI-2004-00263 CVE-2004-0294 · GHSA-gjvj-mxx4-qrvqYaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes…Priority LOW 28YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02731 · Published 2004-03-18 · No fix listed CWE-203