Information disclosure in IBM Infosphere Replication Server

CVE-2013-0584

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Infosphere_replication_server — versions 9.7, 10.1.0, 10.1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)