CVE-2010-5291

Published: Jan 10, 2014Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

Affected (5)

Products: Amberdms: Amberdms Billing System

Amberdms

1 product

Amberdms Billing System

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Amberdms Amberdms Billing System	Up to 1.4.0
Amberdms Amberdms Billing System	Version 1.0.0
Amberdms Amberdms Billing System	Version 1.1.0
Amberdms Amberdms Billing System	Version 1.2.0
Amberdms Amberdms Billing System	Version 1.3.0

Related CWEs

CWE-264

References (4)

https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES

Source: cve@mitre.org

https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG

Source: cve@mitre.org

https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES

Source: af854a3a-2127-422b-91ae-364da2661108

https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.