Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9jw5-jrmv-gmvg

Опубликовано: 01 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

EPSS

Процентиль: 21%
0.00068
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

The captive portal in Inpiazza Cloud WiFi versions prior to v4.2.17 does not enforce limits on the number of attempts for password recovery, allowing attackers to brute force valid user accounts to gain access to login credentials.

EPSS

Процентиль: 21%
0.00068
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-307