8.1
CVE-2016-3025
- EPSS 0.54%
- Veröffentlicht 25.11.2016 03:59:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Security Access Manager Version9.0.0
Ibm ≫ Security Access Manager Version9.0.0.1
Ibm ≫ Security Access Manager Version9.0.1.0
Ibm ≫ Security Access Manager For Mobile Version8.0.0.0
Ibm ≫ Security Access Manager For Mobile Version8.0.0.1
Ibm ≫ Security Access Manager For Mobile Version8.0.0.2
Ibm ≫ Security Access Manager For Mobile Version8.0.0.3
Ibm ≫ Security Access Manager For Mobile Version8.0.0.4
Ibm ≫ Security Access Manager For Mobile Version8.0.0.5
Ibm ≫ Security Access Manager For Mobile Version8.0.1
Ibm ≫ Security Access Manager For Mobile Version8.0.1.2
Ibm ≫ Security Access Manager For Mobile Version8.0.1.3
Ibm ≫ Security Access Manager For Mobile Version8.0.1.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.648 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.2 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|