CVE Catalog
CVE-2023-33868
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.53%
40th percentile - higher than 40% of all known CVEs
Summary
The number of login attempts is not limited, which could allow an attacker to perform a brute force attack on HTTP basic authentication.
Risk Assessment
The lack of login attempt limits increases the risk of a successful attack, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to implement a limit on login attempts and to monitor failed attempts to detect potential attacks.
Original NVD description (English source)
The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.