This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial

Sam de Vries

sam.devries@tidewell-it.example

VUL-005 — No rate limit on the single sign-on login

History

What is live now, and every settled version, newest first.

Current

10/28/2026 12:25:40 AM This version cannot be attributed to anyone.

Description

The single sign-on login page accepts an unlimited number of password attempts. In the penetration test the tester ran thousands of guesses against a test account without being slowed or locked out. Accounts with weak passwords are therefore open to guessing.

Code: VUL-005
Cvss score: 5.9
Discovered at: 2026-04-05
Discovered during event: TES-0001 — Penetration test, external and internal network
External identifier: no value
External link: no value
Owner: PER-023 — Yara Visser
Severity: Medium
Source: PenTest
Source reference: Pentest report TW-PT-01, finding 3
Title: No rate limit on the single sign-on login

History

Current

Description

Are you sure?

Leave this page?