EUVD-2022-1890

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

LDAPLoginModule in JAAS allows wildcard usernames, risking credential theft via brute force attack

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by multiple vulnerabilities in IBM Tivoli Integrated Portal (TIP)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	14 Feb 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to activemq-web (CVE-2012-6092, CVE-2015-6524, CVE-2016-0734, CVE-2011-4905, CVE-2012-6551, CVE-2013-1879, CVE-2013-1880)	27 Jun 202509:54	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource Apache ActiveMQ vulnerabilities identified with IBM Tivoli Integrated Portal (TIP) v2.2	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Tivoli Integrated Portal (TIP) shipped with Tivoli Business Service Manager (CVE-2015-5254, CVE-2014-3600, CVE-2014-3612, CVE-2014-8110, CVE-2014-3579)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	2 May 202412:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to activemq-core (CVE-2014-3600, CVE-2013-1879, CVE-2015-6524, CVE-2011-4905)	27 Jun 202509:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "3a428601-92b9-34f3-9e67-8a13df7f8c45",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7505f5c6-6192-3d9e-955d-edac505b5e9b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-6524
github	www.github.com/apache/activemq/commit/22f2f3dde757d31307da772d579815c1d169bc39
github	www.github.com/apache/activemq
activemq	www.activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-October/168094.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-October/168651.html

03 Oct 2025 20:07Current

7.7High risk

Vulners AI Score7.7

CVSS 25 - 7.5

EPSS0.01167