CVE-2024-53591
CRITICALSeclore v3.27.5.0 - Unauthenticated Authentication Bypass via Brute Force Attack
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-53591. PoCs published by aljoharasubaie.
AI-analyzed exploit summary The repository describes an information leakage vulnerability in Seclore v3.27.5.0, where brute-forcing the 'repoCode' parameter in a specific endpoint can enumerate valid domains and internal services. The PoC is a URL-based brute-force technique without additional exploit code.
Description
An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.
Exploits (1)
The repository describes an information leakage vulnerability in Seclore v3.27.5.0, where brute-forcing the 'repoCode' parameter in a specific endpoint can enumerate valid domains and internal services. The PoC is a URL-based brute-force technique without additional exploit code.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H