CVE-2015-9240

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched

published May 29, 2018

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Published
2018-05-29T20:00Z
EPSS history
Timeline
  • 29 MAY 20:00Z
    Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched
    cvelistv5