Total vulnerabilities in the database
IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.
| Software | From | Fixed in |
|---|---|---|
| ibm / infosphere_information_server | 8.7.0.1 | 8.7.0.1.x |
| ibm / infosphere_information_server | 8.5 | 8.5.x |
| ibm / infosphere_information_server | 8.7 | 8.7.x |
| ibm / infosphere_information_server | 8.5.0.3 | 8.5.0.3.x |
| ibm / infosphere_information_server | 9.1 | 9.1.x |
| ibm / infosphere_information_server | 8.7.0.2 | 8.7.0.2.x |
| ibm / infosphere_information_server | 8.5.0.1 | 8.5.0.1.x |
| ibm / infosphere_information_server | 8.5.0.2 | 8.5.0.2.x |