The Dell Quest One Password Manager possibly 5.0 allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType UseCaptchaEveryTime and CaptchaResponse parameters.