Authentication flaw

2014-09-2320:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

CPENameOperatorVersion
rational_clearcaseeq7.1.2.12
rational_clearcaseeq8.0.0.10
rational_clearcaseeq7.1.1.8
rational_clearcaseeq7.1.2.10
rational_clearcaseeq8.0.0.11
rational_clearcaseeq8.0.1.4
rational_clearcaseeq8.0.1.2
rational_clearcaseeq7.1.1.3
rational_clearcaseeq7.1.2
rational_clearcaseeq8.0.0.1

Name	Operator	Version
rational_clearcase	eq	7.1.2.12
rational_clearcase	eq	8.0.0.10
rational_clearcase	eq	7.1.1.8
rational_clearcase	eq	7.1.2.10
rational_clearcase	eq	8.0.0.11
rational_clearcase	eq	8.0.1.4
rational_clearcase	eq	8.0.1.2
rational_clearcase	eq	7.1.1.3
rational_clearcase	eq	7.1.2
rational_clearcase	eq	8.0.0.1