Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrr2-83p8-vp4c

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

EPSS

Процентиль: 46%
0.00236
Низкий

Дефекты

CWE-284

Связанные уязвимости

nvd
около 11 лет назад

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

EPSS

Процентиль: 46%
0.00236
Низкий

Дефекты

CWE-284