Improper restriction of excessive authentication attempts on WebDAV endpoint