CVE-2024-9342

Katalog CVE

CVSS 9.8 · Critical EPSS 0,44%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada eclipse glassfish. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .

Rincian

Terbit di NVD

16 Juli 2025

Terakhir diubah

18 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.eclipse.org/security/cve-assignement/-/issues/33 issue tracking