Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rxhx-g8q9-v24x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

EPSS

Процентиль: 44%
0.00216
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 11 лет назад

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

EPSS

Процентиль: 44%
0.00216
Низкий

Дефекты

CWE-287