CVE-2021-22530
Improper account management vulnerability in NetIQ Advance Authentication
- State
- Published
- Severity
- 8.2 High
- Published
- Aug 28, 2024
- Updated
- Aug 28, 2024
- Reserved
- Jan 5, 2021
Description
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.2 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L | OpenText |
Weaknesses
- CWE-667 Improper Locking
Affected Products
| Product | Versions |
|---|---|
NetIQ Advance AuthenticationOpenText |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.