CVE-2023-4094

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

El sistema de autenticación de ARCONTE Aurea, en su versión 1.5.0.0, podría permitir a un atacante realizar solicitudes de acceso incorrectas para bloquear cada cuenta legítima y provocar una Denegación de Servicio. Además, se ha identificado un recurso que podría permitir eludir el límite de intentos fijado en el formulario de inicio de sesión.