Total vulnerabilities in the database
BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.
CVSS v2:
No CWE or OWASP classifications available.