Description (CNA)
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eclipse Foundation / Eclipse Glassfish | affected 5.1.0; affected 6.0.0 through 6.2.5; affected 7.0.0 through 7.0.25; affected 7.1.0; affected 8.0.0 before 8.0.3 |
CWE
CWE-307
References
ADP enrichment
No English description supplied.
No references supplied.