CVE-2022-37772

HIGH

7.5

Description

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie11/23/2022

Derniere modification4/25/2025

Sourcenvd

Observations honeypot0

Produits affectes

maarch:maarch_rm

Faiblesses (CWE)

CWE-307CWE-307

References

http://maarch.com(cve@mitre.org)

https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md(cve@mitre.org)

http://maarch.com(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.