CVE-2017-1547

CVE-2017-1547 affects IBM Emptoris Services Procurement. The vulnerability enables username enumeration through the forgot-password flow, allowing an attacker to determine valid usernames and potentially brute-force credentials. This concerns IBM Emptoris Services Procurement 10.0.0.x. Root cause...

Security Bulletin: IBM Emptoris Services Procurement is affected by Information leakage vulnerability (CVE-2017-1547)

Summary The IBM Emptoris Services Procurement product is vulnerable to getting valid usernames through Forgot password process Vulnerability Details CVEID: CVE-2017-1547 DESCRIPTION: IBM Emptoris Services Procurement could allow an unauthorized user enumerate usernames through the use of the forg...