CVE-2003-0402
The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks.
Scoring
- CVSS base score
- 0.03
- EPSS probability
- 0.74%
- Published
- 2003-06-11
- Last modified
- 2026-03-16
Affected products
- n/a n/a