Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Reedos Software Solutions Component: Aim-star Clear all filters
TI-2024-30757 CVE-2024-45790 · GHSA-7x9g-pvv2-c542

User Enumeration vulnerability

Priority MEDIUM 41

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2024-09-11 No fix listed CWE-307
TI-2024-30756 CVE-2024-45789 · GHSA-wmq4-q8rm-8vp5

Parameter Tampering Vulnerability

Priority LOW 36

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00219 Published 2024-09-11 No fix listed CWE-354
TI-2024-30755 CVE-2024-45788 · GHSA-852g-3f6p-43mm

No Rate Limiting Vulnerability

Priority MEDIUM 44

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2024-09-11 No fix listed CWE-799