Seclore Authentication Bypass Vulnerability via Brute Force Attack

A vulnerability in the login page of Seclore version 3.27.5.0 allows attackers to bypass authentication through brute force attacks. This issue enables the enumeration of valid domains and internal services by manipulating the repository code parameter.

Impact

Exploitation of this vulnerability allows for authentication bypass, potentially leading to unauthorized access to the application or its services.

Reproduction

To reproduce this vulnerability, perform a brute force attack on the login page by repeatedly submitting different values for the repository code parameter. This will allow the enumeration of valid domains and internal services hosted by the application.