Lucene search
HistoryNov 03, 2007 - 12:46 a.m.
CVE-2007-5797
cve-2007-5797
apache geronimo
sqlloginmodule
authentication bypass
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.
Affected configurations
Node
apachegeronimoMatch2.0
ORapachegeronimoMatch2.0.1
ORapachegeronimoMatch2.0.2
ORapachegeronimoMatch2.1
Related
nvd
nvd
CVE-2007-5797
2007-11-03 00:46:00
veracode
veracode
Authentication Bypass
2019-07-08 11:31:10
prion
prion
Authentication flaw
2007-11-03 00:46:00
cvelist
cvelist
CVE-2007-5797
2007-11-03 00:00:00
redhatcve
redhatcve
CVE-2007-5797
2015-10-30 09:26:35
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2007-5797