CVE-2013-5461

Name of the Vulnerable Software and Affected Versions IBM Endpoint Manager for Remote Control versions 9.0.0 through 9.0.1 Tivoli Remote Control version 5.1.2

Description The issue allows remote attackers to more easily decrypt passwords by leveraging access to stored hashes of partial passwords.

Recommendations For IBM Endpoint Manager for Remote Control versions 9.0.0 through 9.0.1, update to a version that does not store multiple hashes of partial passwords to prevent easier decryption by attackers. For Tivoli Remote Control version 5.1.2, update to a version that does not store multiple hashes of partial passwords to prevent easier decryption by attackers.