Lucene search
HistoryJun 21, 2011 - 2:52 a.m.
CVE-2011-1128
cve-2011-1128
load.php
simple machines forum
smf
access control
denial of service
brute force
vulnerability
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.0%
The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
Related
prion
prion
Design/Logic Flaw
2011-06-21 02:52:00
cvelist
cvelist
CVE-2011-1128
2022-10-03 16:15:11
openvas
openvas
Simple Machines Forum Multiple Vulnerabilities
2011-06-24 00:00:00
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.0%
Related for CVE-2011-1128