CVE-2007-0195

medium

Description

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

References

https://tech.f5.com/home/solutions/sol6923.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-0197

http://www.securityfocus.com/bid/21957

http://www.osvdb.org/32736

http://www.mnin.org/advisories/2007_firepass.pdf

http://secunia.com/advisories/23627

http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html

Details

Source: Mitre, NVD

Published: 2007-01-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00632