CVE-2015-5010

2016-02-1502:00:00

ibm

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

68.2%

JSON

IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.