First published: Fri May 31 2019(Updated: )
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system. IBM X-Force ID: 157013.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Intelligent Operations Center | >=5.1.0<=5.2.0 | |
IBM Intelligent Operations Center for Emergency Management | >=5.1.0<=5.1.0.6 | |
IBM Water Operations for Waternamics | >=5.1.0<=5.2.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-4068 is a vulnerability in IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 that allows user enumeration and brute forcing into the system.
CVE-2019-4068 has a severity rating of 7.5 (High).
IBM Intelligent Operations Center versions 5.1.0 through 5.2.0, IBM Intelligent Operations Center for Emergency Management versions 5.1.0 through 5.1.0.6, and IBM Water Operations for Waternamics versions 5.1.0 through 5.2.1.1 are affected by CVE-2019-4068.
An attacker can exploit CVE-2019-4068 by performing user enumeration and then brute forcing into the system.
It is recommended to apply the necessary patches and updates provided by IBM to mitigate CVE-2019-4068. Please refer to the IBM support website for detailed instructions.