Skip to content
OpenAdvisories
High · 7.5 CVE-2021-42544 EUVD-2021-29513GHSA-jxgv-3jv5-8mh9

Lack of Rate limiting in Authentication in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.28 —

References