CVE-2026-78617
2026-08-28
02h16 +00:00
02h16 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined number of failed attempts, but this setting is not enabled by default.
CVE 정보
관련 약점
| 약점 이름 | 출처 | |
|---|---|---|
| Observable Discrepancy The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor. |
||
| Improper Restriction of Excessive Authentication Attempts The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame. |
