6.5
Moyenne
CVE-2023-4094 ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests…
Description
ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Arconte Áurea 1.5 | premières → < 1.5.0.0 | 1.5.0.0 |
Autres CVE de Arconte Áurea
Les 5 CVE de Arconte Áurea →
CVE-2023-4096
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could…
8.6
Élevée
CVE-2023-4095
User enumeration vulnerability in Arconte Áurea 1.5.0.0 version
5.3
Moyenne
CVE-2023-4093
Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version
5.5
Moyenne
CVE-2023-4092
SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version
8.8
Élevée