Lucene search
MitreCVELIST:CVE-2012-5055HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-5055
2022-10-0316:15:30
mitre
www.cve.org
5
vmware springsource spring security
daoauthenticationprovider
password check
response delay
remote attackers
enumeration
valid usernames
login requests
DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of login requests.
Related
ubuntucve
ubuntucve
CVE-2012-5055
2012-12-05 00:00:00
prion
prion
Default credentials
2012-12-05 17:55:00
nvd
nvd
CVE-2012-5055
2012-12-05 17:55:01
osv
osv
cve
cve
CVE-2012-5055
2022-10-03 16:15:30
github
github
redhat
redhat
(RHSA-2013:0649) Important: Fuse ESB Enterprise 7.1.0 update
2013-03-14 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ
2020-02-20 12:42:12