CVE-2002-1065 in Jana Web Server

Zusammenfassung

von MITRE

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Veröffentlichung: 04.10.2002
• Moderieren: akzeptiert
• Eintrag: VDB-18978
• CPE: bereit
• CWE: CWE-287 (bestätigt)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00636
• KEV: nein
• Aktivitäten: very low
• Sektor: Transportation, Energy, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1065
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1065/