CVE-2007-5085

EPSS 0.66%
Published 26.09.2007 10:17:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 1 References 11

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Geronimo Version2.0.1

Apache ≫ Geronimo Version2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.66%	0.685

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://geronimo.apache.org/2007/09/07/mejb-security-alert.html

http://osvdb.org/38661

http://secunia.com/advisories/26906

Vendor Advisory

http://secunia.com/advisories/27464

http://www-1.ibm.com/support/docview.wss?uid=swg21271586

http://www.securityfocus.com/bid/25804

http://www.securitytracker.com/id?1018877

https://issues.apache.org/jira/browse/GERONIMO-3456

https://nvd.nist.gov/vuln/detail/CVE-2007-5085

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5085

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5085

EUVD