Windu CMS Client-Side Brute-Force Protection Bypass Vulnerability

A vulnerability exists in Windu CMS version 4.1, allowing attackers to bypass weak client-side brute-force protection. The application uses the 'loginError' parameter to manage login attempts, but does not store attempt counts or timeout information on the server. This lack of server-side tracking enables attackers to reset the 'loginError' parameter and circumvent brute-force defenses. While the vendor was notified of this vulnerability, no response regarding the details or affected version range was received. Only version 4.1 has been tested and confirmed vulnerable, leaving the status of other versions uncertain.

Impact

Exploitation of this vulnerability allows for brute-force attacks to be conducted without restriction, potentially leading to unauthorized access.