VULNERABILITY INTELLIGENCE

CVE-2001-1528

CVSS score5 MEDIUM

EPSS probability7.91%

CISA KEVNot currently listed

Published2001-12-31

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.

Weakness classification

CWE-203: Observable Discrepancy

Primary references

cve@mitre.org — Broken Link, Vendor Advisory
cve@mitre.org — Broken Link
cve@mitre.org — Broken Link, Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Exploit, Third Party Advisory, VDB Entry