CVE-2021-29842: Medium severity ibm websphere application server feature pack for web services vulnerability
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.
Other sources
IBM WebSphere Application Server could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-29842?
CVE-2021-29842 is a vulnerability in IBM WebSphere Application Server that allows a remote user to enumerate usernames.
Which versions of IBM WebSphere Application Server are affected by CVE-2021-29842?
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty 17.0.0.3 through 21.0.0.9 are affected by CVE-2021-29842.
What is the severity of CVE-2021-29842?
The severity of CVE-2021-29842 is medium with a CVSS score of 5.3.
How can a remote user exploit CVE-2021-29842?
A remote user can exploit CVE-2021-29842 by enumerating usernames through a difference in responses from valid and invalid login attempts.
Where can I find more information about CVE-2021-29842?
You can find more information about CVE-2021-29842 on the IBM X-Force ID page (https://exchange.xforce.ibmcloud.com/vulnerabilities/205202) and the IBM support page (https://www.ibm.com/support/pages/node/6489485).