CVE-2014-0924

Summary: IBM MessageSight 1.0 and 1.1 are affected by CVE-2014-0924. The issue arises because the server does not verify that all characters of a password are correct, enabling remote authenticated users to bypass access restrictions using a password substring. Impact: Bypass of authentication fo...