Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-47088

User Enumeration vulnerability

Description

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apex Softcell LD Geo

Default version status: unaffected

  • <4.0.0.7affected

References