USN-9084-1: Radicale vulnerability

It was discovered that Radicale did not delay failed authentication attempts when using htpasswd authentication. A remote attacker could possibly use this issue to obtain user passwords through timing or brute-force attacks.

Quelle: Originalartikel öffnen