Vulnerability Description
IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Access Manager 9.0 Firmware | 9.0.0 |
| Ibm | Security Access Manager For Web 7.0 Firmware | 7.0.0.1 |
| Ibm | Security Access Manager For Web 8.0 Firmware | 8.0.0.1 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80694
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80728
- http://www-01.ibm.com/support/docview.wss?uid=swg21970508PatchVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80694
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80728
- http://www-01.ibm.com/support/docview.wss?uid=swg21970508PatchVendor Advisory
FAQ
What is CVE-2015-5010?
CVE-2015-5010 is a vulnerability with a CVSS score of 7.5 (HIGH). IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for re...
How severe is CVE-2015-5010?
CVE-2015-5010 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5010?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Access Manager 9.0 Firmware, Ibm Security Access Manager For Web 7.0 Firmware, Ibm Security Access Manager For Web 8.0 Firmware.