Skip to content
OpenAdvisories
High · 7.5 CVE-2021-28248 EUVD-2021-14937GHSA-8m4g-7q24-6qwq

CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is ab…

Published Mar 26, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perform an arbitrary number of /web/frames/ authentication attempts using different passwords, and eventually gain access to a targeted account, NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References