Vulnerability · Published Sep 19, 2023 · Assigned by INCIBE
CVE-2023-4094Weak authentication vulnerability in Fujitsu Arconte Áurea
Medium 6.5
In plain English
A medium-severity security flaw in Arconte Áurea from Fujitsu . There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 57.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fujitsu | Arconte Áurea | 0 – before 1.5.0.0 |
Weakness: CWE-1390 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L