CVE-2007-2590

high

Description

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

References

http://www.vupen.com/english/advisories/2007/1727

http://www.securityfocus.com/archive/1/468048/100/0/threaded

http://securityreason.com/securityalert/2689

http://secunia.com/advisories/25212

http://osvdb.org/34514

Details

Source: Mitre, NVD

Published: 2007-05-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.0056