Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-4094 EUVD-2023-53984GHSA-52p8-9vrh-6wx7

Weak authentication vulnerability in Fujitsu Arconte Áurea

Published Sep 19, 2023 · Updated Sep 25, 2024 · Assigned by INCIBE

Description

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

Affected products

VendorProductAffectedFixed
Fujitsu Arconte Áurea < 1.5.0.0 1.5.0.0

References