7.5
Élevée
CVE-2023-50326 IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute…
Description
IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 275107.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerSC | Versions non publiées |
Autres CVE de PowerSC
Les 13 CVE de PowerSC →
CVE-2023-50962
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy…
5.9
Moyenne
CVE-2023-50328
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings
3.7
Faible
CVE-2023-50938
IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim
6.5
Moyenne
CVE-2023-50935
IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote…
6.5
Moyenne