Authentication Bypass

rdiffweb is vulnerable to authentication bypass. The vulnerability is due to a lack of a rate limit on the user login feature which allows an attacker to bruteforce the login page and access the previous user sessions.