IBM Security Bulletin: IBM® Intelligent Operations Center is vulnerable to user enumeration (CVE-2019-4068)

Jun 6, 2019 9:01 am EDT

Categorized: Medium Severity

Share this post:

IBM® Intelligent Operations Center is vulnerable to user enumeration, allowing an attacker to brute force into the system.

CVE(s): CVE-2019-4068

Affected product(s) and affected version(s):
This vulnerability affects the following products and versions:

• IBM® Intelligent Operations Center V5.1.0 – V5.2.0
• IBM® Intelligent Operations Center for Emergency Management V5.1.0 – V5.1.0.6
• IBM® Water Operations for Waternamics V5.1.0 – V5.2.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10880229
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157013

from IBM Product Security Incident Response Team https://ibm.co/2EVioFo