Lucene search

K
cvelistINCIBECVELIST:CVE-2023-4094
HistorySep 19, 2023 - 1:15 p.m.

CVE-2023-4094 Weak authentication vulnerability in Fujitsu Arconte รurea

2023-09-1913:15:00
CWE-1390
INCIBE
www.cve.org
fujitsu
arconte รกurea
weak authentication
version 1.5.0.0
denial of service

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

8.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

ARCONTE Aureaโ€™s authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Arconte รurea",
    "vendor": "Fujitsu ",
    "versions": [
      {
        "lessThan": "1.5.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

8.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for CVELIST:CVE-2023-4094