CVE-2026-78617
2026-08-28
02h16 +00:00
02h16 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Observable Discrepancy The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor. |
||
| Improper Restriction of Excessive Authentication Attempts The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame. |
