Beveiligingsadvies

CVE-2025-59113

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-18 13:26:31

Laatst bijgewerkt 2025-12-05 12:21:23

Toegewezen door CERT-PL

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting this parameter. Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.

← Alle CVE's bekijken Bekijk op cve.org ↗