CVE-2014-6099

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which…

published October 26, 2014

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01332 · 70.7th percentile
Published
2014-10-26T18:00Z
EPSS history
Timeline
  • 26 OCT 18:00Z
    The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which…
    cvelistv5