8.2
Élevée
CVE-2021-22530 A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force…
Description
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NetIQ Advance Authentication 6.3 | 6.3.5.1 → dernières | Pas de correctif indiqué |
Autres CVE de NetIQ Advance Authentication
Les 6 CVE de NetIQ Advance Authentication →
CVE-2021-22509
A vulnerability identified in storing and reusing information in Advance Authentication
8.1
Élevée
CVE-2021-22529
A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information
6.3
Moyenne
CVE-2021-38120
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled…
5.1
Moyenne
CVE-2021-38121
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific…
8.3
Élevée