CWE-645.

Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0…

• Dell PowerScale InsightIQ
• CWE-645

Payload: Unauthenticated account-lockout denial of service

• Authentication bypass
• CWE-645

<3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association

• Cap-go capgo
• CWE-645

Dell PowerScale OneFS: Dell PowerScale OneFS, version 9.13.0.0…

• Dell PowerScale OneFS
• CWE-645

Denial-of-Service Vulnerability in MELSEC iQ-F Series

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
• CWE-645

Mattermost Fails to Lockout LDAP Users After Repeated Login Failures in github.com/mattermost/mattermost-server

• CWE-645

>=9.11.0+incompatible, <9.11.12+incompatible || >=10.4.0+incompatible, <10.4.5+incompatible || >=10.5.0+incompatible, <10.5.3+incompatible || >=10.6.0+incompatible, <10.6.2+incompatible · fixed in 9.11.12+incompatible, 10.4.5+incompatible, 10.5.3+incompatible, 10.6.2+incompatible

BIG-IP Next Central Manager vulnerability

• F5 BIG-IP Next Central Manager
• CWE-645

Keycloak Denial of Service via account lockout

• CWE-640
• CWE-645

<24.0.0 · fixed in 24.0.0

Duplicate Advisory: Keycloak DoS via account lockout

• CWE-645

<24.0.0 · fixed in 24.0.0

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the devi…

• KNX Association KNX Protocol Connection Authorization Option 1
• CWE-645