CVE-2014-6078 | BDVDB-2026-66843 Detail

Description#

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not have a lockout period after invalid login attempts, which makes it easier for remote attackers to obtain admin access via a brute-force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21684475
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358
https://exchange.xforce.ibmcloud.com/vulnerabilities/95762
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581

Exploit#

No public exploit known

History#

Version 12014-12-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.