CVE-2013-3040

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

🔗 References (6)

• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg21646136
• psirt@ushttp://www.securityfocus.com/bid/61755
• psirt@ushttps://exchange.xforce.ibmcloud.com/vulnerabilities/84765
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21646136
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/61755
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/84765