Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h6v-vg4c-567j

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

EPSS

Процентиль: 94%
0.07093
Низкий

Связанные уязвимости

nvd
почти 21 год назад

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

EPSS

Процентиль: 94%
0.07093
Низкий