CVE-2025-30235
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of …
Published: 2025-03-19 · CVSS: 3.5 · CVSS 3.1
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7