PT-2017-9627 · Kabona Ab · Webdatorcentral

Published 2017-02-13 · Updated 2017-03-01 · CVE-2016-8347

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kabona AB WebDatorCentral (WDC) versions prior to 3.4.0

Description An issue in the WDC application allows for a brute force attack method due to the lack of limitation on authentication attempts.

Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2016-8347

Affected Products

Webdatorcentral

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-8347 · Security Note
• http://securityfocus.com/bid/93547 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07 · Note