Authentication Bypass in IBM solidDB Affected by Client-Specified Password Hash Length

CVE-2011-1560

Summary

IBM solidDB is vulnerable to an authentication bypass due to an issue in solid.exe, which allows attackers to exploit the system by specifying a short password-hash length value. This flaw permits unauthorized access, compromising the integrity and security of the database system. Affected versions include solidDB prior to version 4.5.181, 6.0.x versions before 6.0.1067, and others in multiple branches such as 6.1.x, 6.3.x, and 6.5.x before specified updates. Users are urged to apply the necessary updates to mitigate this risk.

References