CoreCVE
Back

HIGH

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response

Published Jun 12, 2017

Description

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 12, 2017
Updated Sep 16, 2024
Reserved Jun 12, 2017
Link CVE-2017-9557
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-9557
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-9557