PT-2021-10875
CVE-2020-23283
·
تاريخ النشر
2021-07-21
·
تاريخ التحديث
2021-08-02
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
mConnect application version v02.001.00
Description
The issue allows an attacker to discover valid users from the application's database through brute force. This is due to information disclosure in the Logon Page of the mConnect application.
Recommendations
For version v02.001.00, consider temporarily restricting access to the Logon Page until a fix is available. As a mitigation measure, restrict brute force attempts on the login functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾