exploitDog

CVE-2013-3040

Опубликовано: 16 авг. 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00254

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-x3wc-cq8w-x9q6

github

больше 3 лет назад

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

EPSS

Процентиль: 48%

0.00254

Низкий

5 Medium

CVSS2

Дефекты

CWE-200