CVE-2022-37144
08.09.2022, 01:15
The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can bruteforce their way past MFA protections to login as the targeted user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| plextrac | plextrac | 𝑥 < 1.17.0 |
𝑥
= Vulnerable software versions