PT-2023-13615 · Easyvista · Easyvista

CVE-2022-38491 · Publicado 2023-01-10 · Atualizado 2025-04-09

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions EasyVista versions 2020.2.125.3 through 2022.1.109.0.03

Description An issue was discovered in the application where part of it does not implement protection against brute-force attacks.

Recommendations For versions 2020.2.125.3 through 2022.1.109.0.03, update to version 2022.1.133.0 to correct this issue. As a temporary workaround, consider implementing additional security measures to protect against brute-force attacks until the update can be applied.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2022-38491

Produtos afetados

Easyvista

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-38491 · Aviso do Fabricante
• https://t.me/cvenotify/118473 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-38491 · Nota de Segurança
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-38491 · Nota
• https://t.me/cvenotify/43087 · Publicação no Telegram
• https://t.me/cibsecurity/56264 · Publicação no Telegram