PT-2024-10873
CVE-2021-20556
·
تاريخ النشر
2024-05-03
·
تاريخ التحديث
2025-01-07
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Cognos Controller versions 10.4.1 through 11.0.0
Description
The issue allows a remote user to enumerate usernames due to differentiating error messages on existing usernames.
Recommendations
For versions 10.4.1 through 11.0.0, update to a version that includes a fix for this issue to prevent username enumeration.
As a temporary workaround, consider restricting access to error messages for existing usernames until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾