Products
Yordam Library Automation System
- before 20.1
Source
iletisim@usom.gov.tr
Tags
CVE-2024-5682 details
Published : Sept. 18, 2024, 12:15 p.m.
Last Modified : Sept. 18, 2024, 2:35 p.m.
Last Modified : Sept. 18, 2024, 2:35 p.m.
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information Technology Yordam Library Automation System allows Interface Manipulation.This issue affects Yordam Library Automation System: before 20.1.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.5 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-307 | Improper Restriction of Excessive Authentication Attempts | The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
Base Score
6.5
Exploitability Score
3.9
Impact Score
2.5
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
References
| URL | Source |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-24-1496 | iletisim@usom.gov.tr |
This website uses the NVD API, but is not approved or certified by it.