PT-2020-17353

Name of the Vulnerable Software and Affected Versions Solstice Pod versions prior to 3.3.0 Solstice Pod version Open4.3 Description The issue allows the Administrator password to be enumerated using brute-force attacks via the "/Config/service/initModel?password=" Solstice Open Control API. This ...