The vulnerability is an observable response discrepancy that enables password brute forcing against the Vertica management console. An attacker can submit multiple credential attempts and infer success or failure by the differing responses, potentially gaining unauthorized access. This weakness is categorized as CWE-204, reflecting an observable logic flaw that undermines authentication integrity.

OpenText Vertica versions from 10.0 through 10.X, 11.0 through 11.X, and 12.0 through 12.X are affected. No sub‑version details are provided, so all releases within these version ranges should be considered vulnerable until a patch is applied.

The CVSS score of 5.1 indicates a medium severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the near term. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by targeting the management console login interface and brute‑forcing credentials based on response time or content differences. Because the flaw resides in authentication, the risk impacts confidentiality and availability of the management console but does not grant arbitrary code execution.