Design/Logic Flaw

2014-01-1016:47:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

CPENameOperatorVersion
amberdms_billing_systemeq1.1.0
amberdms_billing_systemeq1.3.0
amberdms_billing_systemeq1.0.0
amberdms_billing_systemeq1.2.0
amberdms_billing_systemle1.4.0

Name	Operator	Version
amberdms_billing_system	eq	1.1.0
amberdms_billing_system	eq	1.3.0
amberdms_billing_system	eq	1.0.0
amberdms_billing_system	eq	1.2.0
amberdms_billing_system	le	1.4.0