Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-30076
HistoryApr 16, 2023 - 3:15 a.m.

Design/Logic Flaw

2023-04-1603:15:00
PRIOn knowledge base
www.prio-n.com
4
entab erp
design flaw
user full name
brute force attack
rate limiting

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

ENTAB ERP 1.0 allows attackers to discover users’ full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.

CPENameOperatorVersion
erpeq1.0

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

Related for PRION:CVE-2022-30076