PT-2025-17611 · Unknown · Meon Kyc Solutions
CVE-2025-42600
·
Publicado
2025-04-23
·
Atualizado
2025-04-23
CVSS v4.0
8.2
Alta
| Vetor | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Meon KYC solutions (affected versions not specified)
Description
The issue is caused by missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of the login process. A remote attacker could exploit this by performing a brute force attack on OTP, potentially gaining unauthorized access to other user accounts.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Restriction of Excessive Authentication Attempts
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Meon Kyc Solutions