SB2018082910 - Brute-force attack in Fiserv web platform
Published: August 29, 2018
Security Bulletin ID
SB2018082910
Severity
Low
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Brute-force attack (CVE-ID: N/A)
The vulnerability allows a remote attacker to conduct brute-force attack on the target system.
The vulnerability exists due to use of a specific “event number" in the operation alerts. A remote attacker can conduct brute-force attack, gain access to the victims' data and potentially modify or delete important information, as phone numbers and email addresses.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.