CVE-2014-6099: Medium severity ibm b2b sterling integrator vulnerability
The Change Password feature in IBM Sterling B2B Integrator 5.2.x through 5.2.4 does not have a lockout protection mechanism for invalid login requests, which makes it easier for remote attackers to obtain admin access via a brute-force approach.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6099?
The severity of CVE-2014-6099 is high due to the lack of a lockout mechanism allowing brute-force attacks on admin access.
How do I fix CVE-2014-6099?
To fix CVE-2014-6099, implement a lockout policy on the Change Password feature to prevent repeated invalid login attempts.
Who is affected by CVE-2014-6099?
CVE-2014-6099 affects users of IBM Sterling B2B Integrator versions 5.2.x up to and including 5.2.4.
What can an attacker achieve through CVE-2014-6099?
An attacker can exploit CVE-2014-6099 to gain unauthorized admin access using brute-force login attempts.
Is CVE-2014-6099 a network vulnerability?
CVE-2014-6099 is considered a web application vulnerability rather than a network vulnerability.