Vulnerability in Tarantella Secure Global Desktop
CVE-2005-0486
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
EPSS: 0.013 (66.6th percentile) — read the EPSS interpretation.
Affected products
- Tarantella Secure_global_desktop — versions enterprise_3.42, enterprise_4.0
- Tarantella Tarantella_enterprise — versions 3.30, 3.40
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed, Patch, Vendor Advisory)