PT-2021-18407
CVE-2021-29687
·
تاريخ النشر
2021-05-20
·
تاريخ التحديث
2021-05-24
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Identity Manager version 7.0.2
Description
The issue allows a remote user to enumerate usernames due to a difference in responses from valid and invalid login attempts.
Recommendations
For IBM Security Identity Manager version 7.0.2, consider implementing measures to make the login response uniform for both valid and invalid attempts to prevent username enumeration. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾