Lucene search
HistoryJan 12, 2007 - 5:04 a.m.
CVE-2007-0195
f5
firepass
my.activation.php3
error messages
login attempts
ldap
cve-2007-0195
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.7%
my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.
Related
prion
prion
Design/Logic Flaw
2007-01-12 05:04:00
openvas
openvas
F5 FirePass Multiple Input Validation Vulnerabilities
2015-04-17 00:00:00
cvelist
cvelist
CVE-2007-0195
2007-01-11 02:00:00
securityvulns
securityvulns
Multiple F5 FirePass security vulnerabilities
2007-01-12 00:00:00
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.009 Low
EPSS
Percentile
82.7%
Related for CVE-2007-0195