| Package | Affected versions | Patched versions |
|---|---|---|
| infosphere information server | = 8.5= 8.5.0.1= 8.5.0.2= 8.5.0.3= 8.7= 8.7.0.1= 8.7.0.2= 9.1 |
IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free