CVE-2002-1654

No fix known EPSS 3%

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.

Published 2005-03-28 · CVE record · OSV

Products: iplanet_web_server, netscape enterprise_server