CVE-2020-24007

Name of the Vulnerable Software and Affected Versions Umanni RH version 1.0

Description The issue allows an unauthenticated user to launch a brute-force authentication attack against the Login page due to a lack of limitation on the number of authentication attempts.

Recommendations For Umanni RH version 1.0, consider implementing a mechanism to limit the number of authentication attempts to prevent brute-force attacks. As a temporary workaround, restrict access to the Login page to minimize the risk of exploitation.