CVE-2024-47656
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 4, 2024
Updated: Oct 16, 2024
CWE ID 307
Summary
CVE-2024-47656 is a newly disclosed vulnerability affecting the Shilpi Client Dashboard. This issue arises from insufficient security measures on the API-based login system, which lacks restrictions on incorrect login attempts. Malicious actors can capitalize on this weakness through brute force attacks, aimed at guessing valid user credentials. Successful exploitation grants unauthorized access to other user accounts, posing a significant threat to data confidentiality and system integrity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Client Dashboard