Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45790

Опубликовано: 11 сент. 2024
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user passwords, which could lead to gain unauthorized access and compromise other user accounts.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:reedos:aim-star:2.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00833
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 9.8
github
больше 1 года назад

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user passwords, which could lead to gain unauthorized access and compromise other user accounts.

EPSS

Процентиль: 74%
0.00833
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307