2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2015-5010" ,
"sourceIdentifier" : "psirt@us.ibm.com" ,
"published" : "2016-02-15T02:59:05.637" ,
"lastModified" : "2016-03-10T15:57:25.260" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack."
} ,
{
"lang" : "es" ,
"value" : "IBM Security Access Manager for Web 7.0 en versiones anteriores a 7.0.0 IF21, 8.0 en versiones anteriores a 8.0.1.3 IF4 y 9.0 en versiones anteriores a 9.0.0.1 IF1 no tiene un mecanismo de bloqueo para intentos de inicio de sesi\u00f3n no v\u00e1lidos, lo que facilita a atacantes remotos obtener acceso a trav\u00e9s de un ataque de fuerza bruta."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.0
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-254"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B5B6BD9-C0DF-4359-A6C1-F66E24912800"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "22433CE0-9772-48CE-8069-612FF3732C21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2569AA28-5C61-4BBD-A501-E1ACFA36837B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "79AFD6BE-4ED1-4A9C-AF30-F083A7A4F418"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3AB188A2-D7CE-4141-A55A-C074C84E366E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE776097-1DA4-4F27-8E96-61E3D9FFE8D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FE4E5283-0FEE-4F37-9C41-FA695063FF79"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "39D9B9CF-5F3D-4CA3-87A0-AAE1BA5F09C1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "73EB6121-62CD-49FC-A1D2-5467B007253C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A91ADDFE-9362-4D7E-B623-D662D81382E8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C8E0F31E-EB32-4442-91BE-95A9625F308F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "701D729E-A817-4525-ADD9-EC810326B9E2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E5883F2E-83F4-4630-813B-21E533BA2CB7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A1FB9953-91A1-47BB-B6BF-088FA75BEBCA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CD7B0192-465A-48EF-8B51-FC6BC6EC464A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.15:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3E40F5AD-E090-4D0B-A580-D794F60215DB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.16:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EC5BD4D1-DD9B-4845-AF17-9B813C748D1A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.17:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E463425-45EA-4A7B-B034-694DBB944A51"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.18:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3135C99C-2BFD-42B5-8AF0-EC8420C91B3B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.19:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CCED596D-1737-4DB2-9A24-C0864A6727ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.20:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F0F6AC6B-9B8C-4026-BD61-5EA5F8ABEE51"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B0D27CF-70BF-4C72-A963-310272D8EBF7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "97E19969-DD73-42F2-9E91-504E1663B268"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9CC2E05-5179-4241-A710-E582510EEB0D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD1366C8-9C78-4B40-8E40-19C4DFEC2B1D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D331E67E-25D3-4C34-8118-49E2A8B29D96"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "73E4F0CD-26DF-4975-8F40-ECB8E03A08C2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FFE6F2A0-BD38-4853-A8FB-299A341FA0B6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D0122CE6-44D9-4A5F-8DD4-B1F7F229FDFB"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV80694" ,
"source" : "psirt@us.ibm.com"
} ,
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV80728" ,
"source" : "psirt@us.ibm.com"
} ,
{
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21970508" ,
"source" : "psirt@us.ibm.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
}
]
}
