Weak authentication vulnerability in Fujitsu Arconte Áurea
CVE-2023-4094

8.2HIGH

Key Information:

Vendor

Fujitsu

Status
Arconte Áurea
Vendor
CVE Published:
19 September 2023

What is CVE-2023-4094?

The ARCONTE Aurea authentication system in version 1.5.0.0 has a critical vulnerability that could be exploited by an attacker to submit unauthorized access requests. This flaw could disrupt legitimate user accounts by blocking their access, effectively causing a denial of service. Additionally, an identified resource may allow an attacker to bypass the login attempt limitations, further exacerbating the potential impact on the system's availability and user access.

Affected Version(s)

Arconte Áurea 0 < 1.5.0.0

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pablo Arias Rodriguez and Jorge Alberto Palma Reyes, members of CSIRT-CV
JSON
.
CVE-2023-4094 : Weak authentication vulnerability in Fujitsu Arconte Áurea