CVE-2023-4096

Name of the Vulnerable Software and Affected Versions Fujitsu Arconte Áurea version 1.5.0.0

Description The issue is related to a weak password recovery mechanism, which could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.

Recommendations For Fujitsu Arconte Áurea version 1.5.0.0, consider temporarily restricting the use of the password recovery mechanism until a patch is available. As a mitigation measure, restrict access to the password recovery feature to minimize the risk of exploitation.