Description (CNA)
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see https://docs.azul.com/payara/technical-documentation/payara-server-documentation/security-guide/administering-system-security.html .
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Payara / Payara Server | affected 7.0.0 before 7.2.0; affected 7.2025.1 before 7.2026.7; affected 6.0.0 before 6.40.0; affected 5.20.0 before 5.89.0; affected 4.1.144 before 4.1.2.191.57; affected 6.2023.1; affected 5.2020.1 |
CWE
CWE-307
References
- https://docs.azul.com/payara/release-notes/release-notes-7.2.0.html
- https://docs.azul.com/payara/version/6/release-notes/release-notes-6.40.0.html
- https://docs.azul.com/payara/version/5/release-notes/release-notes-5.89.0.html
- https://docs.azul.com/payara/version/4/release-notes/release-notes-4.1.2.191.57.html
- https://docs.azul.com/payara-community/release-notes/release-notes-7.2026.7.html
ADP enrichment
No English description supplied.
No references supplied.