VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 5, 2011· Updated Apr 29, 2026

CVE-2011-1560

CVE-2011-1560

Description

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.

Affected products

26
  • IBM/Soliddb26 versions
    cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*+ 25 more
    • cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*range: <=4.5.180
    • cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:4.5.179:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.1.18:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.1.20:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.30.0039:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.30.0040:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.30.0044:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.3.38:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.