CVE-2015-7902 in Mango Automation

Résumé

par MITRE

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 22/10/2015
• Divulgation: 28/10/2015
• Modérer: accepté
• Entrée: VDB-78933
• CPE: prêt
• CWE: CWE-200 (confirmé)
• Exploitation: Télécharger
• CVSS: 5.0 (NVD)
• EPSS: 0.03498
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7902
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7902
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7902/