Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h6v-vg4c-567j

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

EPSS

Процентиль: 90%
0.05881
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.

EPSS

Процентиль: 90%
0.05881
Низкий