CVE-2007-5797 - Vulnerability Details - OpenCVE

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00709.

Key SSVC decision points have not yet been added.

Vendors	Products
Apache Subscribe	Geronimo Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:apache:geronimo:2.0:::::::*
	cpe:2.3:a:apache:geronimo:2.0.1:::::::*
	cpe:2.3:a:apache:geronimo:2.0.2:::::::*
	cpe:2.3:a:apache:geronimo:2.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-5767	SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/38662
http://secunia.com/advisories/27478
http://secunia.com/advisories/27482
http://www-1.ibm.com/support/docview.wss?uid=swg21286105
http://www.securityfocus.com/bid/26287
http://www.vupen.com/english/advisories/2007/3675
http://www.vupen.com/english/advisories/2007/3676
https://issues.apache.org/jira/browse/GERONIMO-3543

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-03T00:00:00

Updated: 2024-08-07T15:46:59.611Z

Reserved: 2007-11-02T00:00:00

Link: CVE-2007-5797

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-11-03T00:46:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5797

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-287

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-25T00:00:00", "descriptions": [{"lang": "en", "value": "SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2007-11-09T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-3676", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3676"}, {"name": "38662", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/38662"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105"}, {"name": "27482", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27482"}, {"name": "26287", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26287"}, {"name": "27478", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27478"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://issues.apache.org/jira/browse/GERONIMO-3543"}, {"name": "ADV-2007-3675", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3675"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5797", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-3676", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3676"}, {"name": "38662", "refsource": "OSVDB", "url": "http://osvdb.org/38662"}, {"name": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105", "refsource": "CONFIRM", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105"}, {"name": "27482", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27482"}, {"name": "26287", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26287"}, {"name": "27478", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27478"}, {"name": "https://issues.apache.org/jira/browse/GERONIMO-3543", "refsource": "CONFIRM", "url": "https://issues.apache.org/jira/browse/GERONIMO-3543"}, {"name": "ADV-2007-3675", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3675"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:46:59.611Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2007-3676", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3676"}, {"name": "38662", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/38662"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105"}, {"name": "27482", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27482"}, {"name": "26287", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26287"}, {"name": "27478", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27478"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://issues.apache.org/jira/browse/GERONIMO-3543"}, {"name": "ADV-2007-3675", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3675"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5797", "datePublished": "2007-11-03T00:00:00", "dateReserved": "2007-11-02T00:00:00", "dateUpdated": "2024-08-07T15:46:59.611Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:geronimo:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "CA6E27E4-BE63-4AE3-B29C-6BCF752FF608", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:geronimo:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FD68D814-2EA1-4E58-AAB1-3B23535A2D26", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:geronimo:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "373ECB49-508C-446C-9CC9-6438D4D4137B", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:geronimo:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "ECF8E5A6-BCAA-428E-A703-6D1508AE2DA0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database."}, {"lang": "es", "value": "El SQLLoginModule en el Apache Geronimo 2.0 hasta el 2.1 no lanza una excepci\u00f3n para nombre de usuarios no existentes, lo que permite a atacantes remotos evitar la autenticaci\u00f3n mediante un intento de registrase con alg\u00fan usuario que no est\u00e9 contenido en la Base de Datos."}], "id": "CVE-2007-5797", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-11-03T00:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/38662"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/27478"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27482"}, {"source": "cve@mitre.org", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/26287"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3675"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3676"}, {"source": "cve@mitre.org", "url": "https://issues.apache.org/jira/browse/GERONIMO-3543"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/38662"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/27478"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27482"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21286105"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/26287"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3675"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3676"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://issues.apache.org/jira/browse/GERONIMO-3543"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Not vulnerable. This issue did not affect versions of geronimo-specs packages as shipped Red Hat Enterprise Linux 5, Red Hat Application Stack, Red Hat Application Server, Red Hat Directory Server and Red Hat Certificate System, as the geronimo-specs package only contains the specification of the Apache Geronimo Server\u2019s services and interfaces and not the vulnerable J2EE server classes.", "lastModified": "2007-11-06T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}