CVE-2015-1984

Currently unrated

Key Information:

Vendor
IBM
Status
Infosphere Master Data Management
Vendor
CVE Published:
20 July 2015

Summary

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force attacks.

References

http://www.securityfocus.com/bid/75474
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21960244
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.