Vulnerability Description
WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Esi Products | Webeoc | <= 6.0.1 |
References
- http://www.kb.cert.org/vuls/id/170394Third Party AdvisoryUS Government Resource
- http://www.kb.cert.org/vuls/id/170394Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2005-4029?
CVE-2005-4029 is a vulnerability with a CVSS score of 5.0 (MEDIUM). WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute ...
How severe is CVE-2005-4029?
CVE-2005-4029 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4029?
Check the references section above for vendor advisories and patch information. Affected products include: Esi Products Webeoc.