🟠 Unauthenticated Administrator Control Panel login attempts allowed without proper restrictions

Summary

Bulk login attempts of Administrator Control Panel (ACP) make it too easy to automate guessing of user passwords by unauthorized parties.

No authentication is required but this brute force loophole made it easier to automatically attempt authentication.

Common Vulnerabilities and Exposures (CVE)

Requested

GitHub Security Advisory (GHSA)

GHSA-prh5-f5wq-cvrg

Provider Urgency (choice of: Not Defined, Clear, Green, Amber, or Red)

A - Amber

Link to Published GHSA with More Details

Highlights

:orange_circle: for some, but much greener and less of a concern if you are running the active FreePBX firewall.