Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-45790

User Enumeration vulnerability

Description

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user passwords, which could lead to gain unauthorized access and compromise other user accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star)

Default version status: unaffected

  • 2.0.1affected

References