Lucene search

K
nvd[email protected]NVD:CVE-2007-0195
HistoryJan 12, 2007 - 5:04 a.m.

CVE-2007-0195

2007-01-1205:04:00
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.009

Percentile

82.9%

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

Affected configurations

Nvd
Node
f5firepassMatch5.4
OR
f5firepassMatch5.4.1
OR
f5firepassMatch5.4.2
OR
f5firepassMatch5.4.3
OR
f5firepassMatch5.4.4
OR
f5firepassMatch5.4.5
OR
f5firepassMatch5.4.6
OR
f5firepassMatch5.4.7
OR
f5firepassMatch5.4.8
OR
f5firepassMatch5.4.9
OR
f5firepassMatch5.5
OR
f5firepassMatch5.5.1
OR
f5firepassMatch6.0
VendorProductVersionCPE
f5firepass5.4cpe:2.3:h:f5:firepass:5.4:*:*:*:*:*:*:*
f5firepass5.4.1cpe:2.3:h:f5:firepass:5.4.1:*:*:*:*:*:*:*
f5firepass5.4.2cpe:2.3:h:f5:firepass:5.4.2:*:*:*:*:*:*:*
f5firepass5.4.3cpe:2.3:h:f5:firepass:5.4.3:*:*:*:*:*:*:*
f5firepass5.4.4cpe:2.3:h:f5:firepass:5.4.4:*:*:*:*:*:*:*
f5firepass5.4.5cpe:2.3:h:f5:firepass:5.4.5:*:*:*:*:*:*:*
f5firepass5.4.6cpe:2.3:h:f5:firepass:5.4.6:*:*:*:*:*:*:*
f5firepass5.4.7cpe:2.3:h:f5:firepass:5.4.7:*:*:*:*:*:*:*
f5firepass5.4.8cpe:2.3:h:f5:firepass:5.4.8:*:*:*:*:*:*:*
f5firepass5.4.9cpe:2.3:h:f5:firepass:5.4.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.009

Percentile

82.9%

Related for NVD:CVE-2007-0195