How severe is CVE-2007-6198?

The severity of CVE-2007-6198 has not been assessed with CVSS v3.

CVE-2007-6198

Name: aqualogic_interaction
Author: bea

NONE

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerat

Veröffentlicht: 12/1/2007Aktualisiert: 4/9/2025

Beschreibung

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.