CVE

Id
27905  
CVE No.
CVE-2007-4548  
Status
Candidate  
Description
The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module.  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287868 27905 CVE-2007-4548 MLIST:[dev] 20070813 Geronimo 2.0 Release suspended due to security issue found before release  View
287869 27905 CVE-2007-4548 URL:http://www.nabble.com/Geronimo-2.0-Release-suspended-due-to-security-issue-found-before-release-t4263667s134.html  View
287870 27905 CVE-2007-4548 MISC:http://geronimo.apache.org/2007/08/21/apache-geronimo-201-released.html  View
287871 27905 CVE-2007-4548 MISC:https://issues.apache.org/jira/browse/GERONIMO-1201  View
287872 27905 CVE-2007-4548 CONFIRM:http://geronimo.apache.org/2007/08/13/apache-geronimo-v20-release-delayed-due-to-security-issue.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53859 JVNDB-2007-002551 ALPass におけるフォーマットストリングの脆弱性 英語版の ALPass および韓国語版の ALPass には、フォーマットストリングの脆弱性が存在します。 CVE-2007-4550 27905 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002551.html  View