CWE-645: Overly Restrictive Account Lockout Mechanism
The product contains an account lockout protection mechanism, but the mechanism is too restrictive and can be triggered too easily, which allows attackers to deny service to legitimate users by causing their accounts to be locked out.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerscale insightiq Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account... 5.3 Medium
- payloadcms payload Payload: Unauthenticated account-lockout denial of service 6.9 Medium
- cap-go capgo Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association 7.1 High
- dell powerscale onefs Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism... 5.3 Medium
- mitsubishi electric corporation melsec iq-f series fx5-cclgn-ms, melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es +70 more +72 more Denial-of-Service Vulnerability in MELSEC iQ-F Series 5.3 Medium
- mattermost, mattermost server +1 more Repeated LDAP login failures can lock an LDAP account 5.8 Medium
- f5 big-ip next central manager BIG-IP Next Central Manager vulnerability 6.3 Medium
- redhat keycloak, red hat build of keycloak, single sign-on 7 +2 more Keycloak-core: dos via account lockout 3.7 Low
- knx connection authorization, knx association protocol connection authorization option 1 +1 more KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the... 7.5 High