CVE-2007-5797
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-5797
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Geronimo SQLLoginModule模块绕过认证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Geronimo是美国阿帕奇（Apache）软件基金会的一款开源的J2EE服务器产品，该产品具有可伸缩性、可进行配置管理等特点。 Apache Geronimo的实现上存在绕过认证漏洞，远程攻击者可以使用数据库中不存在的用户名通过SQLLoginModule模块成功的认证到服务器，获得非授权访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-5797
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-5797
请登录查看更多情报信息。
- http://www-1.ibm.com/support/docview.wss?uid=swg21286105x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2007-5797
Same Patch Batch · n/a · 2007-11-03 · 7 CVEs total
| CVE-2007-5796 | Blue Coat ProxySG 管理控制台跨站脚本攻击漏洞 | |
| CVE-2007-5798 | IBM WebSphere Application Server 用户控制台 "uddigui/navigateTree.do"多个跨站脚本攻击漏洞 | |
| CVE-2007-5799 | IBM WebSphere Application Server uddigui/navigateTree.do 跨站请求伪造漏洞 | |
| CVE-2007-5800 | WordPress BackUpWordPress 多个远程文件包含漏洞 | |
| CVE-2007-5801 | Work System e-commerce 未明漏洞 | |
| CVE-2007-5802 | Firewolf Technologies Synergiser Index.PHP 目录遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2007-5797
No comments yet