Lucene search
HistorySep 26, 2007 - 10:17 a.m.
CVE-2007-5085
cve-2007-5085
apache geronimo
vulnerability
authentication bypass
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
84.1%
Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain “access to Geronimo internals” via unspecified vectors.
Affected configurations
Node
apachegeronimoMatch2.0.1
ORapachegeronimoMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache:geronimo | apache geronimo | eq | 2.0.1 |
| apache:geronimo | apache geronimo | eq | 2.1 |
Related
nvd
nvd
CVE-2007-5085
2007-09-26 10:17:00
veracode
veracode
Authentication Bypass
2019-07-08 09:44:05
cvelist
cvelist
CVE-2007-5085
2007-09-26 10:00:00
prion
prion
Authentication flaw
2007-09-26 10:17:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
84.1%
Related for CVE-2007-5085