Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2007-6408


Vulnerability Score 5.0 5.0
CVE Id CVE-2007-6408
Last Modified 05 Sep 2008 05:33:10
Published 17 Dec 2007 01:46:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE



IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplication of a username occurs when creating an account or (2) when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames.

Vulnerable Systems


  • Ibm Tivoli Provisioning Manager Express


XF - provisioningmanager-user-info-disclosure(38866)

BID - 26724

BUGTRAQ - 20071205 [ELEYTT] Public Advisory 05-12-2007

SREASON - 3458

Last Updated: 27 May 2016 10:46:28