Summary
The remote web server is affected by an information disclosure issue.
Description:
The version of WebCalendar on the remote host is prone to a user account enumeration weakness in that in response to login attempts it returns different error messages depending on whether the user exists or the password is invalid.
Solution
Upgrade to WebCalendar 1.0.4 or later.
CVSS Base Score : 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)
References
Severity
Classification
-
CVE CVE-2006-2247 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Adobe ColdFusion Multiple Vulnerabilities-03 May-2014
- Apache Solr XML External Entity(XXE) Vulnerability-01 Jan-14
- Apache Commons Daemon 'jsvc' Information Disclosure Vulnerability
- Apache Tomcat SecurityConstraints Security Bypass Vulnerability
- Apache Tomcat NIO Connector Denial of Service Vulnerability