1 matches found
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
SummaryThe Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to conduct credential testing attacks, such as credential stuffing or passwo...
6.5CVSS5.9AI score0.00295EPSS
SaveExploits0References7Affected Software1
20