Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1064
cve-2002-1064
thomas hauck
jana server
remote attackers
user identification
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.8%
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.
Affected configurations
Node
t._hauckjana_web_serverMatch1.0
ORt._hauckjana_web_serverMatch1.45
ORt._hauckjana_web_serverMatch1.46
ORt._hauckjana_web_serverMatch2.0
ORt._hauckjana_web_serverMatch2.0_beta1
ORt._hauckjana_web_serverMatch2.0_beta2
ORt._hauckjana_web_serverMatch2.2.1
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.8%
Related for CVE-2002-1064