critical9.8
CVE-2020-24007
Umanni RH 1.0 does not limit the number of authentication attempts.
Impact
Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Umanni | Human Resources | Version 1.0 |