CVE

Id
29154  
CVE No.
CVE-2007-5797  
Status
Candidate  
Description
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.  
Phase
Assigned (20071102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305838 29154 CVE-2007-5797 CONFIRM:https://issues.apache.org/jira/browse/GERONIMO-3543  View
305839 29154 CVE-2007-5797 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21286105  View
305840 29154 CVE-2007-5797 BID:26287  View
305841 29154 CVE-2007-5797 URL:http://www.securityfocus.com/bid/26287  View
305842 29154 CVE-2007-5797 VUPEN:ADV-2007-3675  View
305843 29154 CVE-2007-5797 URL:http://www.vupen.com/english/advisories/2007/3675  View
305844 29154 CVE-2007-5797 VUPEN:ADV-2007-3676  View
305845 29154 CVE-2007-5797 URL:http://www.vupen.com/english/advisories/2007/3676  View
305846 29154 CVE-2007-5797 OSVDB:38662  View
305847 29154 CVE-2007-5797 URL:http://osvdb.org/38662  View
305848 29154 CVE-2007-5797 SECUNIA:27482  View
305849 29154 CVE-2007-5797 URL:http://secunia.com/advisories/27482  View
305850 29154 CVE-2007-5797 SECUNIA:27478  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52128 JVNDB-2007-000791 IBM WebSphere Application Server の UDDI ユーザコンソールにおける複数のクロスサイトフォージェリの脆弱性 IBM WebSphere Application Server (WAS) の UDDI ユーザコンソールには、uddigui/navigateTree.do において、keyField および nameField,valueField,frameReturn の変数チェックの処理に不備が存在するために複数のクロスサイトフォージェリの脆弱性が存在します。 CVE-2007-5799 29154 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000791.html  View