CVE-2022-37146

The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the PlexTrac authentication provider. Login attempts for valid, unlocked users configured to use PlexTrac as their authentication provider ta...

CVE-2022-37146

PlexTrac platforms prior to version 1.28.0 are affected by an authentication flaw allowing username enumeration. An unauthenticated attacker can distinguish between valid, unlocked PlexTrac users and invalid ones by measuring HTTP login response times, as valid unlocked accounts process requests ...

CVE-2022-37145

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenticated remote attacker could perform a bruteforce attack on the login page with no time or attempt limitation in an...

CVE-2022-37145

The CVE describes an authentication-weakness in PlexTrac prior to 1.17.0: an unauthenticated remote attacker can perform brute-force login attempts on the PlexTrac login page without time/attempt limits aimed at accounts using the PlexTrac authentication provider. Affected software: PlexTrac befo...

CVE-2022-37144

CVE-2022-37144 affects the PlexTrac platform prior to API version 1.17.0. The issue is an unrestricted number of MFA TOTP submission attempts, allowing an unauthenticated remote attacker with a valid username and password to brute force MFA protections and log in as the targeted user. Supported b...

CVE-2022-37144

The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can bruteforce their way past MFA protections to login as the targeted user...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from the US-based PlexTrac, Inc. A security vulnerability exists in PlexTrac platform versions prior to 1.28.0 that stems from a username enumeration that allows invalid login attempts via HTTP response time for users configured to...

PlexTrac API 安全漏洞

PlexTrac is a penetration test reporting and management platform from the US-based PlexTrac, Inc. A security vulnerability exists in the PlexTrac API prior to version 1.17.0 that stems from not limiting the number of authentication attempts for accounts configured to use the PlexTrac Authenticati...

PT-2022-23838 · Plextrac · Plextrac

Name of the Vulnerable Software and Affected Versions: PlexTrac versions prior to 1.28.0 Description: The issue allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the PlexTrac authentication provider. An unauthenticated remote attacker ca...

PlexTrac API 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in the PlexTrac API prior to version 1.17.0, which stems from an unrestricted number of MFA TOTP submission attempts, where an unauthenticated, remote attacker...

PT-2022-23837 · Plextrac · Plextrac

Name of the Vulnerable Software and Affected Versions: PlexTrac versions prior to 1.17.0 Description: The issue allows an unauthenticated remote attacker to perform a brute-force attack on the login page with no time or attempt limitation, potentially obtaining valid credentials for platform user...

PT-2022-23836 · Plextrac · Plextrac

Name of the Vulnerable Software and Affected Versions: PlexTrac platform versions prior to 1.17.0 Description: The issue allows an unauthenticated remote attacker with a valid username and password to bruteforce their way past MFA protections and login as the targeted user due to the lack of...

PlexTrac – A Platform for Purple Teaming

PlexTrac is a platform which can be used by internal security teams or consultancies to conduct purple team assessments but it can be used also… Continue reading - PlexTrac - A Platform for Purple Teaming...

PlexTrac – A Platform for Purple Teaming

PlexTrac is a platform which can be used by internal security teams or consultancies to conduct purple team assessments but it can be used also… Continue reading - PlexTrac - A Platform for Purple Teaming...