CVE Daily

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, ...

Medium CVSS 5.3

Overview

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks.

CWE: N/A Published: 2018-09-23T22:29:00.260
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags