8.2
High
CVE-2021-22530 A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force…
Description
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetIQ Advance Authentication 6.3 | 6.3.5.1 → latest | No fix stated |
Other CVEs of NetIQ Advance Authentication
The 6 CVEs of NetIQ Advance Authentication →
CVE-2021-22509
A vulnerability identified in storing and reusing information in Advance Authentication
8.1
High
CVE-2021-22529
A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information
6.3
Medium
CVE-2021-38120
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled…
5.1
Medium
CVE-2021-38121
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific…
8.3
High