CVE-2012-1576

CVE-2012-1576 describes a vulnerability in Atheme 5.x, 6.x, and 7.x where the myuser_delete function fails to properly remove CertFP entries upon user deletion. This oversight allows remote attackers to either gain unauthorized access to a different user account or trigger a denial of service by logging in as a previously deleted user. The vulnerability has a CVSS score of 6.0, indicating a medium severity, with an attack vector over the network, medium attack complexity, and potential for partial confidentiality, integrity, and availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.