IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.
2025-01-25T14:15:29.233
2025-03-04T17:28:02.893
Undergoing Analysis
CVSSv3.1: 5.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | control_center | 6.2.1.0 | Yes |
| Application | ibm | control_center | 6.3.1.0 | Yes |