Design/Logic Flaw

2015-07-2001:59:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.7%

JSON

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force attacks.

CPENameOperatorVersion
infosphere_master_data_managementeq10.1
infosphere_master_data_managementeq9.1
infosphere_master_data_managementeq11.4
infosphere_master_data_managementeq11.0
infosphere_master_data_managementeq11.3

Name	Operator	Version
infosphere_master_data_management	eq	10.1
infosphere_master_data_management	eq	9.1
infosphere_master_data_management	eq	11.4
infosphere_master_data_management	eq	11.0
infosphere_master_data_management	eq	11.3