An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.

gpw generates shorter passwords than required

Password policy for new users is not strong enough

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.

Possible Improper authentication Vulnerability in OpenText eDirectory

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.

IBM Common Licensing information disclosure

IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 297895.

A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce a strong user password policy. This could facilitate a brute force attack against legitimate user passwords.