Brute Force Prevention Bypassed

Description

Brute Force Prevention Bypassed occurs when software lacks adequate measures to counter multiple failed authentication attempts within a short time frame, rendering it vulnerable to brute force attacks.

Recommendation

To mitigate this vulnerability, consider implementing CAPTCHA challenges or enforcing account lockout mechanisms for target user accounts or source IP addresses after multiple failed authentication attempts.

References

• CWE-307
• OWASP 2021-A7
• OWASP: Account Lockout
• Wikipedia: CAPTCHA