Lucene search
HistoryMay 27, 2014 - 2:55 p.m.
CVE-2012-6452
axway secure messenger
user enumeration
authentication
security vulnerability
nvd
cve-2012-6452
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.7%
Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.
Related
securityvulns
securityvulns
Axway Email Firewall information leakage
2013-01-21 00:00:00
CVE-2012-6452 Axway Secure Messenger Username Disclosure
2013-01-21 00:00:00
prion
prion
Authentication flaw
2014-05-27 14:55:00
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.7%
Related for CVE-2012-6452