CVEvulnerability
CVE-2022-37772
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-23
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-307
Description
Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.
Affected configurations
• maarch maarch rm (>= 2.8 < 2.8.6)
• maarch maarch rm 2.9
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md Exploit, Third Party Advisory
- https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md Exploit, Third Party Advisory