web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks...
9.8CVSS7.4AI score0.02608EPSS
SaveExploits0References8
OSV•added 2017/04/10 12:00 a.m.•10 views
UBUNTU-CVE-2016-10321
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks...
