AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-4548

HIGH · CVSS 10 EPSS 4.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-08-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2007-4548
Severity
HIGH
CVSS
10
EPSS
4.19%
Apache

Original NVD Description

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module.