| Package | Affected versions | Patched versions |
|---|---|---|
| ichain | = 2.2 |
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free