Description (CNA)
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / WebSphere Application Server | affected 7.0; affected 8.0; affected 8.5; affected 9.0 |
| IBM / WebSphere Application Server Liberty | affected 17.0.0.3; affected 21.0.0.9 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6489485
- https://exchange.xforce.ibmcloud.com/vulnerabilities/205202
ADP enrichment
No English description supplied.