Threats tagged 'ghsa-3pw3-fxfc-9pqv'

HCL AION has a vulnerability in its account lockout mechanism that does not adequately limit repeated failed login attempts. This flaw allows attackers to perform a large number of password guesses against user accounts, increasing the risk of brute-force attacks. The vulnerability may lead to unintended behavior or security impacts under certain conditions. No specific affected versions or patches are currently identified.