Skip to content
OpenAdvisories
Unscored CVE-2015-5010 EUVD-2015-5027GHSA-h6c2-gw9r-pq98

IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mecha…

Published Feb 15, 2016 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

References