Lucene search
Redhat.comRH:CVE-2007-5797HistoryOct 30, 2015 - 9:26 a.m.
CVE-2007-5797
2015-10-3009:26:35
redhat.com
access.redhat.com
3
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.
Related
veracode
veracode
Authentication Bypass
2019-07-08 11:31:10
prion
prion
Authentication flaw
2007-11-03 00:46:00
cve
cve
CVE-2007-5797
2007-11-03 00:46:00
cvelist
cvelist
CVE-2007-5797
2007-11-03 00:00:00
nvd
nvd
CVE-2007-5797
2007-11-03 00:46:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for RH:CVE-2007-5797