CVE-2024-49342

CVSS 7.5v3.1pub. 2025-07-28upd. 2025-08-06

IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

IBM Informix Dynamic Server
APP
Ibm
12.1014.10

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

CWE-307

Referencje

www.ibm.com/support/pages/node/7240777…

Powiązane podatności

CVE-2024-45675HIGH8.4ten sam produkt

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as ad...

CVE-2025-1991HIGH7.5ten sam produkt

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service du...

CVE-2023-28523HIGH8.4ten sam produkt

IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by impro...

CVE-2020-4799HIGH7.8ten sam produkt

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of ...

CVE-2018-1796HIGH7.8ten sam produkt

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and g...