← CVE Intelligence

CVE-2021-42544

Lack of Rate limiting in Authentication in TopEase PUBLISHED

Description (CNA)

Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.

Affected (CNA)

Vendor / productVersions
Business-DNA Solutions GmbH / TopEaseaffected unspecified through 7.1.28; unknown next of 7.1.28 before unspecified

CWE

CWE-307

References

ADP enrichment

CVE

No English description supplied.