CVE-2015-7902

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.

• CWE-200

• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02Patch, Third Party Advisory, US Government Resource

Published

Oct 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7896LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR…
• CVE-2015-7897The media scanning functionality in the face recognition lib…
• CVE-2015-7898Samsung Gallery in the Samsung Galaxy S6 allows local users …
• CVE-2015-7899The com_content component in Joomla! 3.x before 3.4.5 does n…
• CVE-2015-7900Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7901Infinite Automation Mango Automation 2.5.x and 2.6.x through…
• CVE-2015-7903SQL injection vulnerability in Infinite Automation Mango Aut…
• CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automatio…
• CVE-2015-7905Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote at…
• CVE-2015-7906LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 …
• CVE-2015-7907Directory traversal vulnerability in the web server on Honey…
• CVE-2015-7908Honeywell Midas gas detectors before 1.13b3 and Midas Black …