VULNERABILITY INTELLIGENCE
CVE-2012-5615
CVSS score5 MEDIUM
EPSS probability14.78%
CISA KEVNot currently listed
Published2012-12-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor