CVE-2021-20556

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181.
Configurations

No configuration.

History

21 Nov 2024, 05:46

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/199181 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/199181 -
References () https://www.ibm.com/support/pages/node/7149876 - () https://www.ibm.com/support/pages/node/7149876 -
Summary
  • (es) IBM Cognos Controller 10.4.1, 10.4.2 y 11.0.0 podrían permitir que un usuario remoto enumere nombres de usuarios debido a mensajes de error diferenciadores en nombres de usuarios existentes. ID de IBM X-Force: 199181.

03 May 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-03 18:15

Updated : 2024-11-21 05:46


NVD link : CVE-2021-20556

Mitre link : CVE-2021-20556

CVE.ORG link : CVE-2021-20556


JSON object : View

Products Affected

No product.

CWE
CWE-204

Observable Response Discrepancy