PT-2005-3481 · Parlano · Parlano Mindalign

Published 2005-08-17 · Updated 2017-07-11 · CVE-2005-2591

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Parlano MindAlign versions 5.0 and later

Description The issue allows remote attackers to list valid users via unknown vectors. This is related to a "User Enumeration" problem.

Recommendations For versions 5.0 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2591

Affected Products

Parlano Mindalign

References · 6

• http://niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2591 · Security Note
• http://secunia.com/advisories/16408 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21821 · Note
• http://osvdb.org/18754 · Note
• http://securityfocus.com/bid/14562 · Note