CVE-2004-1697

CVE-2004-1697 describes an information disclosure vulnerability in CA Unicenter Management Portal versions 2.0 and 3.1. The "Forgot your Password" function provides distinct error messages for valid and invalid usernames, enabling remote attackers to enumerate existing user accounts. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low complexity and no authentication, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.