CVE-2021-42544highCWE-307

CVE-2021-42544: falha de alta gravidade em Business-DNA Solutions GmbH TopEase

Lack of Rate limiting in Authentication in TopEase

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TopEase

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.4%
Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Business-DNA Solutions GmbH · TopEase
CVEs relacionadas — Business-DNA Solutions GmbH TopEase

No mesmo produto, das mais perigosas para as menos.

CVE-2021-42115HIGHMissing HTTPOnly flag on sensitive cookie in TopEaseEPSS 1.3%CVE-2021-42545HIGHInsufficient Session Expiration in TopEaseEPSS 1.1%CVE-2021-42120MEDIUMMissing Character Length (Denial of Service) in TopEaseEPSS 1.1%CVE-2021-42123HIGHMissing Upload Filter in TopEaseEPSS 1.1%CVE-2021-42121MEDIUMDenial of Service via Invalid Date Format in TopEaseEPSS 1.0%CVE-2021-42116MEDIUMUnauthorized Menu Item Access in TopEaseEPSS 0.8%