Lucene search
HistoryMay 29, 2002 - 4:00 a.m.
CVE-2002-0235
cve-2002-0235
castelle faxpress
network print queue
password leak
information security.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event.
Affected configurations
Node
castellefaxpressMatch6.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| castelle:faxpress | castelle faxpress | eq | 6.3 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.3%
Related for CVE-2002-0235