Vulnerabilities > CVE-2021-29842 - Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Websphere Application Server

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ibm
CWE-307
NVD
Published: 2021-09-16
Updated: 2021-09-27

Summary

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.

Vulnerable Configurations

Part Description Count
Application
Ibm
189

Common Weakness Enumeration (CWE)

References