CVSS: 7.5EPSS: 0%CPEs: 29EXPL: 0CVE-2015-5010
https://notcve.org/view.php?id=CVE-2015-5010
15 Feb 2016 — IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. IBM Security Access Manager for Web 7.0 en versiones anteriores a 7.0.0 IF21, 8.0 en versiones anteriores a 8.0.1.3 IF4 y 9.0 en versiones anteriores a 9.0.0.1 IF1 no tiene un mecanismo de bloqueo para intentos de inicio de sesión no válidos, lo que faci... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV80694 • CWE-254: 7PK - Security Features •
CVSS: 7.5EPSS: 0%CPEs: 26EXPL: 0CVE-2015-5012
https://notcve.org/view.php?id=CVE-2015-5012
15 Feb 2016 — The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. La implementación de SSH en IBM Security Access Manager for Web appliances 7.0 en versiones anteriores a 7.0.0 FP19, 8.0 en versiones anteriores a 8.0.1.3 IF3 y 9.0 en versiones anteriores a 9.0.0.... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768 • CWE-310: Cryptographic Issues •