cbcvebase.
CVE-2011-1560
published 2011-04-05

CVE-2011-1560: solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified…

PriorityP353critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
3.99%
89.3th percentile
solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
ibmsoliddb<= 4.5.180—
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
ibmsoliddb——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.