PT-2023-13615 · Easyvista · Easyvista

Published 2023-01-10 · Updated 2025-04-09 · CVE-2022-38491

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions EasyVista versions 2020.2.125.3 through 2022.1.109.0.03

Description An issue was discovered in the application where part of it does not implement protection against brute-force attacks.

Recommendations For versions 2020.2.125.3 through 2022.1.109.0.03, update to version 2022.1.133.0 to correct this issue. As a temporary workaround, consider implementing additional security measures to protect against brute-force attacks until the update can be applied.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-38491

Affected Products

Easyvista

References · 6

• https://osv.dev/vulnerability/CVE-2022-38491 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38491 · Security Note
• https://t.me/cvenotify/118473 · Telegram Post
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-38491 · Note
• https://t.me/cvenotify/43087 · Telegram Post
• https://t.me/cibsecurity/56264 · Telegram Post