Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-30235 EUVD-2025-6713GHSA-336g-5q96-rpm6

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication att…

Published Mar 19, 2025 · Updated Mar 19, 2025 · Assigned by mitre

Description

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.

Affected products

VendorProductAffectedFixed
SecurEnvoy SecurAccess < 9.4.515 9.4.515

References