Vulnerabilities > CVE-2022-45893 - Improper Restriction of Excessive Authentication Attempts vulnerability in Planetestream Planet Estream
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privileged user accounts by changing the value of the ON cookie. A brute-force attack can calculate a value that provides permanent access.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |