CVE-2014-9006

Monstra 3.0.1 and earlier uses a cookie to track how many login attempts have been attempted, which allows remote attackers to conduct brute force login…

published November 20, 2014

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Monstra 3.0.1 and earlier uses a cookie to track how many login attempts have been attempted, which allows remote attackers to conduct brute force login attacks by deleting the login_attempts cookie or setting it to certain values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01584 · 75.4th percentile
Published
2014-11-20T11:00Z
EPSS history
Timeline
  • 20 NOV 11:00Z
    Monstra 3.0.1 and earlier uses a cookie to track how many login attempts have been attempted, which allows remote attackers to conduct brute force login…
    cvelistv5