by Kastro
Paper/Archive/CVE-2022-2457

CVE-2022-2457

redhat — A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration C…

EPSS 0.6%public exploitCVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.9.499 × 2010.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the application does not limit the number of unsuccessful login attempts.

Affected

ProductAffectedFixed inSource
Red Hat Process Automation Manager 7Fixed in 7.13.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refbugzilla.redhat.com/show_bug.cgi?id=2107990#c0