Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the passwor…
CVSS 3.1HIGH 8.6·Network·No auth·No interaction·EPSS 0.00392·Published 2023-09-19·Fixed in 1.5.0.0CWE-640
ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service.
CVSS 3.1HIGH 8.2·Network·No auth·No interaction·EPSS 0.00496·Published 2023-09-19·Fixed in 1.5.0.0CWE-1390