Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6f83-4pfw-m3vj

Опубликовано: 19 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

EPSS

Процентиль: 78%
0.01193
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

EPSS

Процентиль: 78%
0.01193
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-307