CVSS Score for brute force attack [closed]
A website is given to pentester. It is observed that the website has a login page at https://example.com/admin. In this login page it is also possible to enumerate from error messages that the user "admin" actually exists. The pe…