CVE-2024-45790

Name of the Vulnerable Software and Affected Versions: Reedos aiM-Star version 2.0.1

Description: This issue exists due to missing restrictions for excessive failed authentication attempts on the API-based login. A remote attacker could exploit this by conducting a brute force attack against legitimate user passwords, potentially gaining unauthorized access and compromising other user accounts.

Recommendations: For Reedos aiM-Star version 2.0.1, consider implementing rate limiting or IP blocking for excessive failed login attempts to mitigate the risk of brute force attacks. As a temporary workaround, restrict access to the API-based login until a patch is available.