Vulnerabilities > CVE-2023-40834 - Improper Restriction of Excessive Authentication Attempts vulnerability in Opencart 4.0.2.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |