CVE-2011-1560
Severity CVSS v4.0:
Pending analysis
Type:
CWE-255
Credentials Management
Publication date:
05/04/2011
Last modified:
17/08/2017
Description
solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:* | 4.5.180 (including) | |
| cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:4.5.179:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page