PT-2007-7265 · Ibm · Ibm Tivoli Provisioning Manager Express

Published 2007-12-17 · Updated 2018-10-15 · CVE-2007-6408

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Provisioning Manager Express (affected versions not specified)

Description The issue allows remote attackers to enumerate usernames by providing unspecified information in error messages when attempting to duplicate a username during account creation or when trying to log in with a valid username.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-6408

Affected Products

Ibm Tivoli Provisioning Manager Express

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-6408 · Security Note
• http://securityfocus.com/archive/1/484607/100/0/threaded · Note
• http://securityfocus.com/bid/26724 · Note
• http://securityreason.com/securityalert/3458 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38866 · Note