Executive Summary

This vulnerability exists in the Login Endpoint of Harness version 3.3.0, specifically in the /api/v1/login file. It allows an attacker to bypass proper restrictions on excessive authentication attempts, meaning the system does not adequately limit the number of login tries. This can be exploited remotely, although the attack is considered to have high complexity and is difficult to execute. The vulnerability has been publicly disclosed and may be exploited.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to perform excessive authentication attempts remotely, potentially leading to brute force or credential stuffing attacks. While the impact on confidentiality is partial, there is no direct impact on integrity or availability. However, successful exploitation could lead to unauthorized access or account compromise, depending on the context.

Useful 0 Not Useful 0