PT-2014-5090 · Ibm · Ibm Rational Clearquest

Publicado

2014-09-23

·

Atualizado

2017-08-29

·

CVE-2014-3101

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.15 IBM Rational ClearQuest versions 8.0.0 through 8.0.0.12 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.5
Description The issue concerns the login form in the Web component, which does not insert a delay after a failed authentication attempt. This makes it easier for remote attackers to obtain access via a brute-force attack.
Recommendations For versions 7.1 through 7.1.2.15, update to version 7.1.2.15 or later. For versions 8.0.0 through 8.0.0.12, update to version 8.0.0.12 or later. For versions 8.0.1 through 8.0.1.5, update to version 8.0.1.5 or later.

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-3101

Produtos afetados

Ibm Rational Clearquest