Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2007-4422

The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.

  • Published: Aug 18, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-4422
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
symantec / enterprise_firewall 6 6.x