1. Home
  2. CVE Database
  3. CVE-2015-1984
MEDIUM · 4.0

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary prof...

Vulnerability Description

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force attacks.

CVSS Score

4.0

MEDIUM

AV:N/AC:L/Au:S/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmInfosphere Master Data Management9.1

Related Weaknesses (CWE)

CWE-264CWE-200

References

FAQ

What is CVE-2015-1984?

CVE-2015-1984 is a vulnerability with a CVSS score of 4.0 (MEDIUM). IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary prof...

How severe is CVE-2015-1984?

CVE-2015-1984 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1984?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Infosphere Master Data Management.