Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remaining allowed login attempts in a cookie, which makes it easier for remote attackers to conduct brute force attacks by manipulating this cookie's value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IPdiva SSL VPN Mediation Server cookie数值 暴力破解攻击漏洞
Vulnerability Description
vIPdiva SSL VPN Server 的Mediation Server在一个cookie中储存剩余的允许登陆尝试次数,这会允许远程攻击者通过巧妙处理该cookie的数值来引导暴力破解攻击。
CVSS Information
N/A
Vulnerability Type
N/A