CVE-2015-9240

NONE EPSS 54.9%
Published May 29, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published May 29, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.

Threat Intelligence

EPSS Exploit Probability
54.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-255

Affected Products 1

VendorProductVersionRange
keystonejskeystone* <0.3.16

References 1

  • nodesecurity.io https://nodesecurity.io/advisories/60
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.