low3.5
CVE-2025-30235
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead a…
Impact
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.
Affected products
| Product | Affected versions |
|---|---|
| Shearwater SecurEnvoy SecurAccess Enrol | before 9.4.515 |
Versions were read from the advisory text. No structured product data has been published for this record yet.