CVE-2024-45788 — No Rate Limiting Vulnerability

CVE-2024-45788

No Rate Limiting Vulnerability PUBLISHED

Description (CNA)

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints which could lead to the OTP bombing/flooding on the targeted system.

Affected (CNA)

Vendor / product	Versions
Reedos Software Solutions / Mutual Fund Distribution Product (aiM-Star)	affected 2.0.1

CWE

CWE-799

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0291

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.