CVE-2004-0294

Опубликовано: 23 нояб. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

Ссылки

http://marc.info/?l=bugtraq&m=107703591314745&w=2
Third Party Advisory
http://www.securityfocus.com/bid/9677
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15236
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=107703591314745&w=2
Third Party Advisory
http://www.securityfocus.com/bid/9677
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15236
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yabbforumsoftware:yet_another_bulletin_board:1.0:sp1.3.1:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.0205

Низкий

5 Medium

CVSS2

Дефекты

CWE-203

Связанные уязвимости

GHSA-gjvj-mxx4-qrvq

github

почти 4 года назад