CVE-2023-4094 MEDIUM

CVE-2023-4094: Weak authentication vulnerability in Fujitsu Arconte Áurea

Vendor Fujitsu
Product Arconte Áurea
Weakness CWE-1390
Published September 19, 2023
Last update September 25, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

Key dates

02Disclosure timeline

September 19, 2023 CVE published
September 25, 2024 Record updated