VULNERABILITY INTELLIGENCE

CVE-2005-4029

CVSS score5 MEDIUM

EPSS probability1.34%

CISA KEVNot currently listed

Published2005-12-05

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute force methods.

Primary references

cve@mitre.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource