CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

Input validation

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

CVE-2022-42478

"CVE-2022-42478" affects FortiSIEM prior to 7.0.0 and describes an improper restriction of excessive authentication attempts that could let a non-privileged user brute‑force endpoints. The issue is tied to FortiSIEM’s authentication controls and may allow targeted endpoints to be attacked. The co...

CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts CWE-307 in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints...

Fortinet FortiSIEM 安全漏洞

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. An access control error vulnerability exists in Fortinet FortiSIEM that ste...

PT-2023-23440 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.20 Description: The issue is related to improper restriction of excessive authentication attempts in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.20, update to version 2.0.20 ...

CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3173

CVE-2023-3173 affects froxlor/froxlor prior to 2.0.20. The root cause is an improper restriction of excessive authentication attempts, with potential high impact on confidentiality, integrity, and availability (CVSS 9.8). Mitigation: upgrade to version 2.0.20 or later; apply available patches as ...

PT-2023-3351 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: FortiSIEM versions prior to 7.0.0 Description: The issue is related to an improper restriction of excessive authentication attempts, which may allow a non-privileged user with access to several endpoints to perform a brute force attack on the...

CVE-2023-2675 Improper Restriction of Excessive Authentication Attempts in linagora/twake

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...

CVE-2023-2675

CVE-2023-2675 targets linagora/twake versions prior to 2023.Q1.1223, where there is an improper restriction of excessive authentication attempts. Public assessments indicate high-impact potential (confidentiality, integrity, and availability). The vulnerability is tied to brute-force-like behavio...

PT-2023-20777 · Linagora · Linagora/Twake

Name of the Vulnerable Software and Affected Versions: linagora/twake versions prior to 2023.Q1.1223 Description: The issue is related to improper restriction of excessive authentication attempts. Recommendations: For versions prior to 2023.Q1.1223, update to version 2023.Q1.1223 or later to...

AzuraCast Access Control Error Vulnerability

AzuraCast is a simple self-hosted webcast management suite from AzuraCast. An Access Control Error vulnerability exists in versions of AzuraCast prior to 0.18.3 that stems from an improper restriction of excessive authentication attempts. An attacker could exploit the vulnerability to brute force...

CVE-2023-2531

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...

CVE-2023-2531

The CVE-2023-2531 entry concerns AzuraCast (azuracast/azuracast) before version 0.18.3, where the login rate-limiting/anti-brute-force control could be bypassed, enabling credential brute-forcing. Multiple connected sources corroborate that older AzuraCast releases lacked effective restriction on...

CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast

Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3...