3182 matches found
CVE-2016-2999
CVE-2016-2999 affects IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1. The issue is described as an information disclosure via an unspecified brute-force attack accessible to remote authenticated users. The available documents do not provide concrete technical details abou...
CVE-2016-5996
CVE-2016-5996 affects IBM Tealeaf Customer Experience web portal and is caused by not enforcing minimum password-length restrictions, enabling brute-force access attempts via remote authentication. Affected versions include 8.0–9.0.2 (with specific FP/Patch levels listed by IBM), notably 8.7.1.88...
CVE-2016-5997
Summary of CVE-2016-5997 (IBM Tealeaf CX portal): The web portal in IBM Tealeaf Customer Experience versions prior to certain FP levels does not apply password-quality rules to password changes, making remote brute-force access easier. Affected products include IBM Tealeaf CX portals before 8.7.1...
CVE-2016-5997: Weak Password Recovery Mechanism for Forgotten Password
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51089.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.52249.0.2A FP3 does not apply password-quality rules to password...
CVE-2016-5996: Weak Password Recovery Mechanism for Forgotten Password
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51089.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.52249.0.2A FP3 does not enforce password-length restrictions, which...
PT-2016-5320
Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.x through 4.5 CR5 IBM Connections versions 5.0 before CR4 IBM Connections versions 5.5 before CR1 Description The issue allows remote authenticated users to obtain sensitive information via an unspecified brute-force...
CVE-2016-2999: Exposure of Sensitive Information to an Unauthorized Actor
IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack...
Researchers Find 'Severe' Security Hole in iOS 10 Backup
UPDATE A computer forensics firm says Apple weakened backup security protection with the Sept. 13 release of iOS 10, making it simple work for hackers to crack password protection used for backups of iOS devices stored on Macs and PCs. Elcomsoft, which explained the security hole in a blog post...
CVE-2016-6340
CVE-2016-6340 affects Red Hat QuickStart Cloud Installer (QCI): the kickstart file forces MD5 passwords on deployed systems, enabling brute-force recovery of cleartext passwords. This is described by NVD as high-impact (CVSS3 base 8.4) with local attacker access and strong confidentiality/integri...
CVE-2016-6340
The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...
CVE-2016-6340: Undefined Security Weakness
The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...
Windows Password Cracking
The vulnerability of the Windows operating system is related to incorrect checking of NTLM SSO requests for MSAs. Exploiting this vulnerability allows a malicious actor to select a password by using brute-force attacks on NTLM password hashes...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07749)
Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to brute-force break a user's NTLM password hash...
CVE-2016-0922
Affected product: EMC ViPR SRM (before 3.7.2). Issue: failure to limit password-authentication attempts, enabling brute-force guessing from remote attackers. Root cause/impact: lack of rate-limiting on authentication leads to potential unauthorized access; integrity and availability are not direc...
CVE-2016-6825
Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtai...
CVE-2016-6825
The CVE covers Huawei server families (XH620/V3, XH622/V3, XH628/V3 before specific SPC builds; RH1288V3 before SPC613; RH2288V3 before SPC617; RH2288H V3 before SPC515) where lack of authentication protection enables brute-force password retrieval via remote access. This reflects a remote-authen...
Yelp: Verification of E-Mail address possible on https://biz.yelp.com/login and https://biz.yelp.com/forgot
On pages https://biz.yelp.com/login and https://biz.yelp.com/forgot a malicious user can verify if a particular E-mail address is registered on biz.yelp.com. Steps to reproduce for https://biz.yelp.com/login: 1. Open https://biz.yelp.com/login 2. Enter non existing E-Mail Address 3. Enter any...
CVE-2016-6340
The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...
CVE-2016-5799
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...
PT-2016-2707
Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100V2 versions prior to 2.8 Moxa OnCell G3111 versions prior to 1.7 Moxa OnCell G3151 versions prior to 1.7 Moxa OnCell G3211 versions prior to 1.7 Moxa OnCell G3251 versions prior to 1.7 Description The issue is related to...