Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mwf3-qj4r-2qq4

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3

Описание

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see  https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see  https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .

EPSS

Процентиль: 9%
0.00192
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-307

Связанные уязвимости

nvd
3 дня назад

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see  https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .

EPSS

Процентиль: 9%
0.00192
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-307