Aim-star vulnerabilities

2 known vulnerabilities in Aim-star from Reedos. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Mutual Fund Distribution Product (aiM-Star): Improper Restriction of Excessive Authentication Attempts

  CVE-2024-45790Sep 11, 2024Reedos Software Solutions

  This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate

• 7.5 High severity

  Mutual Fund Distribution Product (aiM-Star): Improper Control of Interaction Frequency

  CVE-2024-45788Sep 11, 2024Reedos Software Solutions

  This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints