| |
Vulnerability CVE-2020-35590
Published: 2020-12-21
Description: |
LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary header for the client source IP address, a malicious user is not limited to perform a brute force attack, because the client IP header accepts any arbitrary string. When randomizing the header input, the login count does not ever reach the maximum allowed retries. |
Type:
CWE-307 (Improper Restriction of Excessive Authentication Attempts)
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
https://n4nj0.github.io/advisories/wordpress-plugin-limit-login-attempts-reloaded/
https://wordpress.org/plugins/limit-login-attempts-reloaded/#developers
|
|
|
Copyright 2024, cxsecurity.com
|
|
|