medium5.0
CVE-2013-3040
IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is inco…
Impact
IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Infosphere Information Server | Versions 8.5, 8.5.0.1, 8.5.0.2, 8.5.0.3, 8.7, 8.7.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg21646136
- http://www.securityfocus.com/bid/61755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84765
- http://www-01.ibm.com/support/docview.wss?uid=swg21646136
- http://www.securityfocus.com/bid/61755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84765