CVE Vulnerability

CVE-2007-2590

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.

6.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.sec-consult.com/289.html Exploit Vendor Advisory
http://secunia.com/advisories/25212 Patch Vendor Advisory
http://securityreason.com/securityalert/2689
http://www.vupen.com/english/advisories/2007/1727
http://osvdb.org/34514
http://www.securityfocus.com/archive/1/468048/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:nokia:groupwise_mobile_server:*:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.4.31.2:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_wireless_email_express:*:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.0.107:*:*:*:*:*:*:*
cpe:2.3:a:nokia:intellisync_mobile_suite:6.6.2.2:*:*:*:*:*:*:*
Information

Published : 2007-05-11 04:20

Updated : 2018-10-16 04:44

NVD link : CVE-2007-2590

Mitre link : CVE-2007-2590

Products Affected
No products.
CWE
CWE-200