CVE-2021-20556

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 10.4.1 through 11.0.0

Description The issue allows a remote user to enumerate usernames due to differentiating error messages on existing usernames.

Recommendations For versions 10.4.1 through 11.0.0, update to a version that includes a fix for this issue to prevent username enumeration. As a temporary workaround, consider restricting access to error messages for existing usernames until a patch is available.