TI-2024-30755 CVE-2024-45788 · GHSA-852g-3f6p-43mm
No Rate Limiting Vulnerability
Priority MEDIUM 44
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints.
Reedos Software Solutions
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Reedos Software Solutions records in CISA KEVNo Reedos Software Solutions vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-30754 CVE-2024-45787 · GHSA-vggf-h36f-57fp
Information disclosure in Reedos Software Solutions Mutual Fund Distribution Product
Priority MEDIUM 44
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints.
TI-2024-30753 CVE-2024-45786 · GHSA-gf35-p27p-qqwm
Improper authorization in Reedos Software Solutions Mutual Fund Distribution Product
Priority MEDIUM 44
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints.
TI-2024-30757 CVE-2024-45790 · GHSA-7x9g-pvv2-c542
User Enumeration vulnerability
Priority MEDIUM 41
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login.
TI-2024-30756 CVE-2024-45789 · GHSA-wmq4-q8rm-8vp5
Parameter Tampering Vulnerability
Priority LOW 36
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process.