CVE-2005-4029

CVE-2005-4029 describes a vulnerability in WebEOC versions prior to 6.0.2, where remote attackers can extract valid usernames directly from the HTML source code of the login page. This information disclosure, while not directly exploitable for system access, could facilitate subsequent attacks like brute-force attempts to lock out legitimate users. The vulnerability has a CVSS score of 5.0, indicating a medium severity due to its network-based attack vector, low complexity, and potential for partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.