VULNERABILITY INTELLIGENCE

CVE-2021-22530

CVSS score8.2 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2024-08-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Description

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1

Weakness classification

  • security@opentext.com: CWE-667
  • nvd@nist.gov: CWE-307

Primary references