CVE-2005-0486

Опубликовано: 30 мар. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.

Ссылки

http://www.tarantella.com/security/bulletin-11.html
Patch
Vendor Advisory
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/19407
http://www.tarantella.com/security/bulletin-11.html
Patch
Vendor Advisory
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/19407

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tarantella:secure_global_desktop:enterprise_3.42:*:*:*:*:*:*:*

cpe:2.3:a:tarantella:secure_global_desktop:enterprise_4.0:*:*:*:*:*:*:*

cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*

cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.0126

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w4f8-qx2r-j8wr

github

больше 4 лет назад