« Volver al listado

CVE-2007-0195

Estado: ModificadaMedia (5)—

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

F5 — Firepass

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0195",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-12T05:04:00.000",
  "references": [
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23627",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mnin.org/advisories/2007_firepass.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/32736",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21957",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://tech.f5.com/home/solutions/sol6923.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23627",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mnin.org/advisories/2007_firepass.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/32736",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21957",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://tech.f5.com/home/solutions/sol6923.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account."
    },
    {
      "lang": "es",
      "value": "my.activation.php3 en F5 FirePass 5.4 hasta 5.5.1 y 6.0 muestra distintos mensajes de error para intentos de autenticación fallidos con nombre de usuario válido para aquellos con un nombre de usuario inválido, lo cual permite a atacantes remotos confirmar la validez de una cuenta LDAP."
    }
  ],
  "lastModified": "2026-06-16T22:35:06.020",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D1F4903-B7FB-4F0E-A4F0-5BC813F5BA22"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD7A44F4-212D-445E-A283-8CC68C7415DE"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BEFC14C-CD35-43BD-BCC9-CD437DAC688D"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAE893BF-A7DA-4FEC-9290-0FD202EC0D8F"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3347FD7A-49F6-464B-A3DA-4D9DD8B0955C"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34DE479A-5D1B-4A21-94AE-D613BA9E6120"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9767F21-1539-4313-B2DA-2D368CADDA66"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0286D438-6F1B-4D91-9A5B-CF12FEDDF427"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0ADF9E53-79F7-4678-A599-20385EEF993C"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E646309D-AAF0-48D7-B8FF-A57DFAADCF05"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "186F19A2-C1F4-4D87-828B-6825B89F9C9D"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:5.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48D051A9-891E-4C1F-904C-058B37F95441"
            },
            {
              "criteria": "cpe:2.3:h:f5:firepass:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BDC49A3-D95D-4DDA-AAFD-4C58C7BA5042"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}