CVE-2020-7995 - The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts

CRITICAL

The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts

Published Jan 26, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.54%

The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-307

Link	Providers	Tags
http://packetstormsecurity.com/files/163541/Dolibarr-ERP-CRM-10.0.6-Login-Brute-Forcer.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-m5c3-3gvf-q8j5		Advisory
https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-brute-force.md		x_refsource_MISCBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2020-7995
https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-brute-force.html		x_refsource_MISCBroken Link