Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-42544

Lack of Rate limiting in Authentication in TopEase

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Business-DNA Solutions GmbH TopEase

  • unspecified to ≤ 7.1.28affected
  • next of 7.1.28 to < unspecifiedunknown

References