Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45789
HistoryMar 07, 2024 - 7:23 a.m.

Password Brute Force Attack

2024-03-0707:23:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
password brute force
login control
super user access
unauthorized access
server vulnerability
software

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

github.com/icewhaletech/casaos-userservice is vulnerable to Password Brute Force Attack. The vulnerability is due to a lack of control on login attempts (missing a rate limit on login). This enables attackers to gain super user-level access to the server, allowing unauthorized access to the server.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

Related for VERACODE:45789