Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oblix NetPoint帐户锁定可绕过漏洞
Vulnerability Description
Oblix NetPoint是一款为WEB服务提供访问控制管理的程序，设计工作于Windows和Solaris系统平台上。 Oblix NetPoint存在设计错误，可导致使用了帐户锁定策略的功能被绕过。 Oblix NetPoint可以配置为当一用户如果多次尝试使用非法密码登陆，此用户帐户可以被临时冻结一段时间，此时间依据配置数值，但是，在锁定时期过后，此帐户的非法登陆锁定功能将失效，此帐户可以多次登陆而不被锁定，只有帐户再次成功登陆以后才会起用此非法登陆锁定功能。所以攻击者可以通过帐户进行暴力攻击来猜
CVSS Information
N/A
Vulnerability Type
N/A