description: The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.
problem types: CWE-307: Improper Restriction of Excessive Authentication Attempts
affected:
{
vendor: n/a
product: Gateway & Management, IPsec VPN blade SNX portal.
versions:
version: R81.10 before take 79, R81 before take 77, R80.40 before take 180, R80.30 before take 255, R80.20 before 230, status: affected
}