CVEvulnerability

CVE-2012-6452

5.0 MEDIUM Published 2014-05-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-05-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287

Description

Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requests depending on whether the user exists, which allows remote attackers to enumerate users via a series of requests.

Affected configurations

• axway email firewall • axway secure messenger (<= 6.5.0) • axway secure messenger 6.3.2

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References