Improper Restriction of Excessive Authentication Attempts in Dell EMC AppSync

CVE-2022-22553

Summary

Dell EMC AppSync versions 3.9 through 4.3 are susceptible to an improper restriction vulnerability that allows adjacent unauthenticated attackers to exploit the system via both the user interface and command line interface. This flaw can facilitate brute-force password attempts, potentially leading to unauthorized access if users employ weak password practices. It underscores the importance of strong password policies and proper authentication mechanisms to safeguard user accounts.

References