CVE-2010-5291

Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2014-01-10

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Amberdms Billing System (Amberdms)

References

• https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEAS…
• https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG