Description
WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2005-4024 | WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods. |
References
| Link | Providers |
|---|---|
| http://www.kb.cert.org/vuls/id/170394 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-17T01:16:44.036Z
Reserved: 2005-12-05T00:00:00.000Z
Link: CVE-2005-4029
No data.
Status : Modified
Published: 2005-12-05T11:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-4029
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD