PT-2007-1594 · WordPress · Wordpress

Publicado 2007-01-09 · Atualizado 2018-10-16 · CVE-2007-0109

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WordPress versions 2.0.5 and earlier

Description The issue allows remote attackers to obtain sensitive information and facilitates brute force attacks by displaying different error messages if a user exists or not.

Recommendations For WordPress versions 2.0.5 and earlier, update to a version later than 2.0.5 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-0109

Produtos afetados

Wordpress

Referências · 13

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0109 · Nota
• http://secunia.com/advisories/23621 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0109 · Nota de Segurança
• http://secunia.com/advisories/23741 · Nota
• https://osv.dev/vulnerability/CVE-2007-0109 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0109 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31262 · Nota
• http://securityfocus.com/archive/1/455927/100/0/threaded · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-0109 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200701-10.xml · Aviso do Fabricante
• http://securityreason.com/securityalert/2113 · Nota
• http://vupen.com/english/advisories/2007/0062 · Nota
• http://osvdb.org/31577 · Nota