Описание
The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for login and is therefore vulnerable for a replay attack.
Ссылки
EPSS
Процентиль: 45%
0.00227
Низкий
5.6 Medium
CVSS3
Дефекты
CWE-323
Связанные уязвимости
CVSS3: 5.6
github
около 1 года назад
The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for login and is therefore vulnerable for a replay attack.
EPSS
Процентиль: 45%
0.00227
Низкий
5.6 Medium
CVSS3
Дефекты
CWE-323