CVE-2022-30600

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

Design/Logic Flaw

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

UBUNTU-CVE-2022-30600

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

CVE-2022-30600

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

CVE-2022-30600

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

CVE-2022-30600

CVE-2022-30600 in Moodle allows bypass of the account lockout threshold due to a flaw in the logic that increments failed_login_attempts. Affected versions include Moodle 3.9.x before 3.9.14, 3.10.x before 3.10.11, 3.11.x before 3.11.7, and 4.0.x before 4.0.1. The vulnerability is among multiple ...

CVE-2022-30600

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

CVE-2022-30600: Incorrect Calculation

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed...

CVE-2022-21934

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2...

CVE-2021-27758: Cross-Site Request Forgery (CSRF)

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

CVE-2021-27758

There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account...

PT-2022-2692 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in the logic used to count failed login attempts, which could result in the account lockout threshold being bypassed. This issue is related to the implementation of the core...

Facebook users wary of security mail find themselves locked out of accounts

It’s not unusual for sites and services to offer additional forms of protection on top of regular security features. Some of the bigger ones even go the extra mile, protecting from attacks up to a potential nation state level. The most famous example of this recently is likely Google. Its Advance...

The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a hacker to lock out any user account at will.

The vulnerability in the web-based interface for managing server applications used in food industry management systems, AK-EM 800, stems from the locking of user accounts after five consecutive unsuccessful attempts to log in to the system. Exploiting this vulnerability could allow a malicious...

Mitsubishi Electric MELSEC iQ-R Series Overly Restrictive Account Lockout Mechanism (CVE-2021-20598)

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated attacker to lockout a legitimate user by continuously trying login with incorrect...

Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE) ( CVE-2021-20417, CVE-2021-20415)

Summary There are multiple vulnerabilities identified in IBM Guardium Data Encryption GDE. These vulnerabilities have been fixed in GDE 4.0.0.5. Please apply the latest version to obtain the fixes. Vulnerability Details CVEID: CVE-2021-20417 DESCRIPTION: IBM Guardium Data Encryption GDE could all...

CVE-2021-38890

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507...

Code injection

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507...

CVE-2021-38890

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507...

CVE-2021-38890

CVE-2021-38890 affects IBM Sterling Connect:Direct Web Services (Products/Versions: 1.0 and 6.0). The root cause is an inadequate account lockout setting that could allow a remote attacker to brute-force credentials. Impact per sources includes potential credential disclosure with no explicit rem...