1. Home
  2. CVE Database
  3. CVE-2023-4094
MEDIUM · 6.5

CVE-2023-4094

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In add...

Vulnerability Description

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
FujitsuArconte Aurea1.5.0.0

Related Weaknesses (CWE)

CWE-287CWE-1390

References

FAQ

What is CVE-2023-4094?

CVE-2023-4094 is a vulnerability with a CVSS score of 6.5 (MEDIUM). ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In add...

How severe is CVE-2023-4094?

CVE-2023-4094 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4094?

Check the references section above for vendor advisories and patch information. Affected products include: Fujitsu Arconte Aurea.