CVE-2024-47656: falha crítica em Shilpi Computers Client Dashboard
User Enumeration vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.5%
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Shilpi Computers · Client DashboardCVEs relacionadas — Shilpi Computers Client Dashboard
No mesmo produto, das mais perigosas para as menos.
CVE-2024-47655HIGHUnrestricted File Upload VulnerabilityEPSS 0.7%CVE-2024-47654HIGHNo Rate Limiting vulnerabilityEPSS 0.5%CVE-2024-47651HIGHParameter Pollution VulnerabilityEPSS 0.4%CVE-2024-47652HIGHInsecure Authentication VulnerabilityEPSS 0.4%CVE-2024-47653HIGHMissing Authorization VulnerabilityEPSS 0.3%