VULNERABILITY INTELLIGENCE

CVE-2015-7902

CVSS score5 MEDIUM

EPSS probability3.50%

CISA KEVNot currently listed

Published2015-10-28

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource