Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-3040
Deferred
More InfoOfficial Page
Source-psirt@us.ibm.com
View Known Exploited Vulnerability (KEV) details
Published At-16 Aug, 2013 | 01:55
Updated At-11 Apr, 2025 | 00:51

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
CPE Matches
IBM Corporation
ibm
>>infosphere_information_server>>8.5
cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.5.0.1
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.5.0.2
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.5.0.3
cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.7
cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.7.0.1
cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>8.7.0.2
cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*
IBM Corporation
ibm
>>infosphere_information_server>>9.1
cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-200Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://www-01.ibm.com/support/docview.wss?uid=swg21646136psirt@us.ibm.com
Patch
Vendor Advisory
http://www.securityfocus.com/bid/61755psirt@us.ibm.com
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/84765psirt@us.ibm.com
N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21646136af854a3a-2127-422b-91ae-364da2661108
Patch
Vendor Advisory
http://www.securityfocus.com/bid/61755af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/84765af854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found