CVE-2002-0212
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid...
CVE-2002-0212 is a high vulnerability (CVSS 7.5) in Hosting Controller Controller, published May 3, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
Exploit likelihood
What each source reports
NVD Score used
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
- Record
CVE-2002-0212- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
- Record
CVE-2002-0212- Updated
- 2026-11-02
EUVDEUVD-2002-0209 No score
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
- Record
EUVD-2002-0209- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8595-j2cp-f8px No score
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid...
The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
- Record
GHSA-8595-j2cp-f8px- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |