CVE-2023-4094
Weak authentication vulnerability in Fujitsu Arconte Áurea
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Sep 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Fujitsu · Arconte ÁureaWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →