CVE-2024-38888
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability in Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 and possibly later allows a local attacker to perform a password brute force attack due to improper restriction of excessive authentication attempts.
Risk Assessment
A local attacker can repeatedly attempt to guess user passwords, increasing the risk of unauthorized access to the system and data.
Recommendation
Update Caterease to the latest available version and implement mechanisms to limit login attempts, such as account lockout after a specified number of failed attempts.
Original NVD description (English source)
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts.