CVE-2006-2354

2006-05-1510:02:00

[email protected]

web.nvd.nist.gov

cve-2006-2354

nmconsole

ipswitch whatsup professional

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.3%

JSON

NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

ipswitchwhatsup_professionalMatch2006

ipswitchwhatsup_professionalMatch2006_premium

CPENameOperatorVersion
ipswitch:whatsup_professionalipswitch whatsup professionaleq2006
ipswitch:whatsup_professionalipswitch whatsup professionaleq2006_premium