Security Advisory

CVE-2009-2435

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-07-13 14:00:00

Last updated 2024-09-17 02:41:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

← Browse all CVEs View on cve.org ↗