CVE-2012-6452

medium

Description

Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/81388

http://www.securityfocus.com/bid/57457

http://archives.neohapsis.com/archives/bugtraq/2013-01/0076.html

Details

Source: Mitre, NVD

Published: 2014-05-27

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00348