CVE-2014-3101

2014-09-2320:00:00

ibm

www.cve.org

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.