cbcvebase.
CVE-2007-0195
published 2007-01-12

CVE-2007-0195: my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those…

medium5CVSS 3.1
AVNACLAuNCPINAN
my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

Affected

13 ranges
VendorProductVersion rangeFixed in
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass
f5firepass