IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack.Referenceshttp://www-01.ibm.com/support/docview.wss?uid=swg1LO89962http://www.securityfocus.com/bid/93147https://www-01.ibm.com/support/docview.wss?uid=swg21989067
