CVE-2020-11052

In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined lockout period, but once expired, protection will not be re-enabled until a user or malicious actor...

CVE-2020-11052

In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined lockout period, but once expired, protection will not be re-enabled until a user or malicious actor...

PT-2020-12513

Name of the Vulnerable Software and Affected Versions Sorcery versions prior to 0.15.0 Description The issue is related to a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule prevents a brute force attack for the defined lockout period,...