Vulnerability Details CVE-2012-6452
Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.6%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0076.html
- http://www.securityfocus.com/bid/57457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81388
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0076.html
- http://www.securityfocus.com/bid/57457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81388
Products affected by CVE-2012-6452
-
cpe:2.3:a:axway:email_firewall:-
-
cpe:2.3:a:axway:secure_messenger:6.3.2
-
cpe:2.3:a:axway:secure_messenger:6.5.0