PT-2021-18514
CVE-2021-29842
·
تاريخ النشر
2021-09-16
·
تاريخ التحديث
2021-09-27
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Application Server versions 7.0 through 9.0
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 21.0.0.9
Description
The issue allows a remote user to enumerate usernames due to a difference in responses from valid and invalid login attempts.
Recommendations
For IBM WebSphere Application Server versions 7.0 through 9.0, update to a version that includes a fix for this issue.
For IBM WebSphere Application Server Liberty versions 17.0.0.3 through 21.0.0.9, update to a version that includes a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾