Fujitsu Arconte Aurea 1.5.0.0

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.

Published: 2023-09-19T13:24:18.900Z
Updated: 2024-09-25T15:25:13.198Z

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.

Published: 2023-09-19T13:22:30.888Z
Updated: 2024-09-25T15:28:11.045Z

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the login form.

Published: 2023-09-19T13:15:00.556Z
Updated: 2024-09-25T15:31:16.724Z

Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access information being viewed by the legitimate user.

Published: 2023-09-19T13:00:27.476Z
Updated: 2024-09-06T14:12:35.915Z

SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the operating system.

Published: 2023-09-19T12:57:10.594Z
Updated: 2024-09-25T14:17:34.806Z