Description (CNA)
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / DataPower Gateway 10.6CD | affected 10.6.1 through 10.6.6 |
| IBM / DataPower Gateway 10.6.0 | affected 10.6.0.0 through 10.6.0.10 |
| IBM / DataPower Gateway 11.0.0 | affected 11.0.0.0 through 11.0.0.2 |
| IBM / DataPower Gateway 10.5.0 | affected 10.5.0.0 through 10.5.0.22 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.
No references supplied.