Lucene search
MitreCVE-2011-1560HistoryApr 05, 2011 - 3:19 p.m.
CVE-2011-1560
2011-04-0515:19:34
CWE-255
mitre
web.nvd.nist.gov
24
ibm
soliddb
cve-2011-1560
authentication bypass
password-hash
security vulnerability
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.013
Percentile
86.0%
solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.
Affected configurations
Node
ibmsoliddbRange≤4.5.180
ORibmsoliddbMatch4.5.167
ORibmsoliddbMatch4.5.168
ORibmsoliddbMatch4.5.169
ORibmsoliddbMatch4.5.173
ORibmsoliddbMatch4.5.175
ORibmsoliddbMatch4.5.176
ORibmsoliddbMatch4.5.178
ORibmsoliddbMatch4.5.179
Node
ibmsoliddbMatch6.0.1060
ORibmsoliddbMatch6.0.1061
ORibmsoliddbMatch6.0.1064
ORibmsoliddbMatch6.0.1065
ORibmsoliddbMatch6.0.1066
ORibmsoliddbMatch6.1
ORibmsoliddbMatch6.1.18
ORibmsoliddbMatch6.1.20
ORibmsoliddbMatch6.3.33
ORibmsoliddbMatch6.3.37
ORibmsoliddbMatch6.3.38
ORibmsoliddbMatch6.5.0.0
ORibmsoliddbMatch6.5.0.1
ORibmsoliddbMatch6.5.0.2
ORibmsoliddbMatch6.30.0039
ORibmsoliddbMatch6.30.0040
ORibmsoliddbMatch6.30.0044
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | soliddb | * | cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.167 | cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.168 | cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.169 | cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.173 | cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.175 | cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.176 | cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.178 | cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.179 | cpe:2.3:a:ibm:soliddb:4.5.179:*:*:*:*:*:*:* |
| ibm | soliddb | 6.0.1060 | cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:* |
Related
openvas
openvas
IBM solidDB User Authentication Bypass Vulnerability
2011-05-18 00:00:00
IBM solidDB User Authentication Bypass Vulnerability
2011-05-18 00:00:00
cvelist
cvelist
CVE-2011-1560
2011-04-05 15:00:00
checkpoint_advisories
checkpoint_advisories
IBM solidDB solid.exe Authentication Bypass (CVE-2011-1560)
2011-05-16 00:00:00
prion
prion
Authentication flaw
2011-04-05 15:19:00
nvd
nvd
CVE-2011-1560
2011-04-05 15:19:34
nessus
nessus
IBM solidDB Password Hash Length Authentication Bypass
2011-04-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.013
Percentile
86.0%
Related for CVE-2011-1560