CVE-2015-7902
Last modified
CVE-2015-7902 is a vulnerability of currently unknown severity. Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.. EPSS estimates a 3.50% chance of exploitation in the next 30 days.
Description
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Infinite Automation Systems | Mango Automation | 2.5.0 |
| Infinite Automation Systems | Mango Automation | 2.5.5 |
| Infinite Automation Systems | Mango Automation | 2.6.0 |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-7902?
How severe is CVE-2015-7902?
How do I fix CVE-2015-7902?
Are you affected by CVE-2015-7902?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
