• info
• discussion
• exploit
• solution
• references

SqWebMail Authentication Response Information Leakage Weakness

There is no exploit required.