Lucene search

K
cve[email protected]CVE-2001-1499
HistoryDec 31, 2001 - 5:00 a.m.

CVE-2001-1499

2001-12-3105:00:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2001-1499
check point vpn
securemote
brute force attacks
nvd

7.7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.1%

Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.

CPENameOperatorVersion
checkpoint:vpn-1checkpoint vpn-1eq4.1

7.7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.1%

Related for CVE-2001-1499