CVE-2014-5385
Shopizer < 1.1.5 - Authentication Bypass
Title source: ruleDescription
com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess passwords via a brute force attack.
Scores
EPSS
0.0031
EPSS Percentile
53.8%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
shopizer/shopizer
< 1.1.5
Timeline
Published
Aug 21, 2014
Tracked Since
Feb 18, 2026