CVE-2024-41276

🗓️ 01 Oct 2024 14:15:05Reported by [email protected]Type

A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their login credentials. However, the request limiting mechanism can be easily bypassed, enabling attackers to perform a brute force attack to guess the correct PIN and gain unauthorized access to the application

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-41276	1 Oct 202416:55	–	circl
CNNVD	Kaiten 安全漏洞	1 Oct 202400:00	–	cnnvd
CVE	CVE-2024-41276	1 Oct 202400:00	–	cve
Cvelist	CVE-2024-41276	1 Oct 202400:00	–	cvelist
Kitploit	CVE-2024-41276	30 Sep 202612:40	–	kitploit
Rapid7 Vulnerability Database (full)	CVE-2024-41276: Improper Restriction of Excessive Authentication Attempts	1 Oct 202400:00	–	rapid7
RedhatCVE	CVE-2024-41276	9 Jan 202609:33	–	redhatcve
Vulnrichment	CVE-2024-41276	1 Oct 202400:00	–	vulnrichment