CVE-2025-58587
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
Risk Assessment
Lack of login attempt restrictions facilitates brute force attacks and may lead to account takeover. This poses a direct threat to system confidentiality and integrity.
Recommendation
Implement mechanisms to limit login attempts, such as account lockout or delays. Consider enabling multi-factor authentication.
Other vulnerabilities in Aplikacja (nieokreślona)
See all- CVE-2025-58591Medium
A remote, unauthorized attacker can brute force folders and files and read them, such as private keys or configurations, making the application vulnerable to gathering sensitive information.
- CVE-2025-58586Medium
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
Original NVD description (English source)
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS