Threats tagged 'ghsa-hhfj-m7jc-gf5x'

Zenitel Connect versions before 1.11.0 implement a per-account lockout mechanism on repeated failed login attempts. This behavior allows remote attackers to cause a denial of service by repeatedly submitting failed login requests for known or guessed usernames, temporarily locking targeted user accounts from accessing the web interface. The vulnerability does not affect intercom call handling functionality.