CVE-2022-37145

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication…

published September 8, 2022

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenticated remote attacker could perform a bruteforce attack on the login page with no time or attempt limitation in an attempt to obtain valid credentials for the platform users configured to use the PlexTrac authentication provider.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2022-09-08T00:28Z
EPSS history
Timeline
  • 08 SEP 00:28Z
    The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication…
    cvelistv5