Vulnerabilities/

Brute Force Prevention Bypassed

Impact: Medium

Description

The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks. MITRE

Recommendation

Try using a CAPTCHA or lockout target user account or source IP address.

References

Last updated on February 15, 2021

This issue is available in SmartScanner Professional

See Pricing