CVE-2013-3040

Published: Aug 16, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack.

Affected (8)

Products: Ibm: Infosphere Information Server

Ibm

1 product

Infosphere Information Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Information Server	Version 8.5.0.1
Ibm Infosphere Information Server	Version 8.5.0.2
Ibm Infosphere Information Server	Version 8.5.0.3
Ibm Infosphere Information Server	Version 8.5
Ibm Infosphere Information Server	Version 8.7.0.1
Ibm Infosphere Information Server	Version 8.7.0.2
Ibm Infosphere Information Server	Version 8.7
Ibm Infosphere Information Server	Version 9.1