|
|
CVE Reference: CVE-2007-6198 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-6198 |
|
|
Description: portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter. |
|
|
CVE Status: Candidate |
|
|
References: ST 1019004 SAID Secunia Advisory: SA27840 MISC http://procheckup.com/Vulnerability_PR06-11.php BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/484469/100/0/threaded BID 26620 |
|
| Return to the previous page. |
