CVE-2011-1560

Published: Apr 5, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.

Affected (26)

Products: Ibm: Soliddb

Ibm

1 product

Soliddb

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Soliddb	Up to 4.5.180
Ibm Soliddb	Version 4.5.167
Ibm Soliddb	Version 4.5.168
Ibm Soliddb	Version 4.5.169
Ibm Soliddb	Version 4.5.173
Ibm Soliddb	Version 4.5.175
Ibm Soliddb	Version 4.5.176
Ibm Soliddb	Version 4.5.178
Ibm Soliddb	Version 4.5.179

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Soliddb	Version 6.0.1060
Ibm Soliddb	Version 6.0.1061
Ibm Soliddb	Version 6.0.1064
Ibm Soliddb	Version 6.0.1065
Ibm Soliddb	Version 6.0.1066
Ibm Soliddb	Version 6.1.18
Ibm Soliddb	Version 6.1.20
Ibm Soliddb	Version 6.1
Ibm Soliddb	Version 6.3.33
Ibm Soliddb	Version 6.3.37
Ibm Soliddb	Version 6.3.38
Ibm Soliddb	Version 6.30.0039
Ibm Soliddb	Version 6.30.0040
Ibm Soliddb	Version 6.30.0044
Ibm Soliddb	Version 6.5.0.0
Ibm Soliddb	Version 6.5.0.1
Ibm Soliddb	Version 6.5.0.2