CVE-2011-1560

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.

Published: 2011-04-05 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-1560 is rated High Risk (71.7/100): CVSS Critical severity, with medium exploitation likelihood (EPSS 3.99%). EPSS rose +3.33% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2011-1560

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.66% 3.99% +3.33%
2 2025-03-30 0.93% 0.66% -0.27%
3 2025-03-29 — 0.93% —

Full EPSS history (6 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-1560

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
 8.6 10.0 [email protected]

Weakness enumeration for CVE-2011-1560

Affected software / configurations for CVE-2011-1560

Vendor Product Version Raw CPE
ibm soliddb <= 4.5.180 cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*
ibm soliddb 4.5.167 cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:*
ibm soliddb 4.5.168 cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:*
ibm soliddb 4.5.169 cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:*
ibm soliddb 4.5.173 cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:*
ibm soliddb 4.5.175 cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:*
ibm soliddb 4.5.176 cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:*
ibm soliddb 4.5.178 cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:*
ibm soliddb 4.5.179 cpe:2.3:a:ibm:soliddb:4.5.179:*:*:*:*:*:*:*
ibm soliddb 6.0.1060 cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*
ibm soliddb 6.0.1061 cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*
ibm soliddb 6.0.1064 cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*
ibm soliddb 6.0.1065 cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*
ibm soliddb 6.0.1066 cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*
ibm soliddb 6.1 cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:*
ibm soliddb 6.1.18 cpe:2.3:a:ibm:soliddb:6.1.18:*:*:*:*:*:*:*
ibm soliddb 6.1.20 cpe:2.3:a:ibm:soliddb:6.1.20:*:*:*:*:*:*:*
ibm soliddb 6.3.33 cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*
ibm soliddb 6.3.37 cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*
ibm soliddb 6.3.38 cpe:2.3:a:ibm:soliddb:6.3.38:*:*:*:*:*:*:*
ibm soliddb 6.5.0.0 cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*
ibm soliddb 6.5.0.1 cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*
ibm soliddb 6.5.0.2 cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*
ibm soliddb 6.30.0039 cpe:2.3:a:ibm:soliddb:6.30.0039:*:*:*:*:*:*:*
ibm soliddb 6.30.0040 cpe:2.3:a:ibm:soliddb:6.30.0040:*:*:*:*:*:*:*
ibm soliddb 6.30.0044 cpe:2.3:a:ibm:soliddb:6.30.0044:*:*:*:*:*:*:*

References for CVE-2011-1560

cvelogic Threat Intelligence