CVE-2002-1065 in Jana Web Server

Riassunto

di MITRE

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Divulgazione: 04/10/2002
• Moderazione: accettato
• Voce: VDB-18978
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01351
• KEV: no
• Attività: molto basso
• Settore: Transportation, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1065
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1065/