Lucene search

K
cve[email protected]CVE-2005-3344
HistoryNov 16, 2005 - 7:42 a.m.

CVE-2005-3344

2005-11-1607:42:00
NVD-CWE-Other
web.nvd.nist.gov
31
cve-2005-3344
horde
administrative account
blank password
remote attackers
access

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.

CPENameOperatorVersion
horde:hordehordeeq3.0.4

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%