IBM TXSeries for Multiplatforms Username Enumeration Vulnerability

A vulnerability in IBM TXSeries for Multiplatforms versions 9.1 and 11.1 allows an attacker to enumerate usernames. This issue arises from a noticeable discrepancy in the login attempt response, which can be exploited to infer the existence of usernames.

Impact

Exploitation of this vulnerability could lead to unauthorized username enumeration, potentially facilitating further attacks such as password guessing or phishing.

Remediation

Users are advised to upgrade to the latest version of IBM TXSeries for Multiplatforms. Instructions for downloading the update are available on Fix Central.