TI-2024-34476 CVE-2024-51561 · GHSA-wjjv-5wqm-9j59
Authentication bypass Vulnerability in Aero
Priority MEDIUM 49
This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints.
Brokerage Technology Solutions
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Brokerage Technology Solutions records in CISA KEVNo Brokerage Technology Solutions vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Wave 2.0 · all components
TI-2024-34473 CVE-2024-51558 · GHSA-9xwg-wxgq-6vph
Brute Force Attack Vulnerability in Wave 2.0
Priority MEDIUM 49
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login.
TI-2024-34472 CVE-2024-51557 · GHSA-5g37-4gxg-27m8
No Rate Limiting Vulnerability in Wave 2.0
Priority LOW 32
This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint.
TI-2024-34475 CVE-2024-51560 · GHSA-32h9-hqhx-9j29
Improper Error Handling Vulnerability in Wave 2.0
Priority LOW 31
This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint.
TI-2024-34474 CVE-2024-51559 · GHSA-hjhx-mr4r-6j6j
Improper Access Control Vulnerability in Wave 2.0
Priority LOW 31
This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints.
TI-2024-34471 CVE-2024-51556 · GHSA-6w35-x982-hj9h
Sensitive Information Disclosure Vulnerability in Wave 2.0
Priority LOW 31
This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response.