Vulnerability Details : CVE-2011-2143
IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain.
Exploit prediction scoring system (EPSS) score for CVE-2011-2143
Probability of exploitation activity in the next 30 days: 0.39%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 71 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-2143
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
CWE ids for CVE-2011-2143
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-2143
-
http://www.securityfocus.com/bid/47909
IBM Datacap Taskmaster Capture Authentication Bypass Vulnerability
-
http://www.ibm.com/support/docview.wss?uid=swg27021511
IBM Datacap Taskmaster Capture Version 8.0.1 Fix Pack 1 readme file
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/67505
IBM Datacap Taskmaster Capture password information disclosure CVE-2011-2143 Vulnerability Report
Products affected by CVE-2011-2143
- cpe:2.3:a:ibm:datacap_taskmaster_capture:8.0.1:*:*:*:*:*:*:*