VULNERABILITY INTELLIGENCE

CVE-2023-4094

CVSS score6.5 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2023-09-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Description

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

Weakness classification

  • CWE-287: Improper Authentication
  • CWE-1390: Weak Authentication

Primary references