We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-9342



Description

In Eclipse GlassFish version 7.0.16 or earlier it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts.

Reserved 2024-09-30 | Published 2025-07-16 | Updated 2025-07-16 | Assigner eclipse


MEDIUM: 6.3CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N

Problem types

CWE-307 Improper Restriction of Excessive Authentication Attempts

Product status

Default status
unaffected

7.0.16
affected

Credits

Marco Ventura reporter

Claudia Bartolini reporter

Andrea Carlo Maria Dattola reporter

Debora Esposito reporter

Massimiliano Brolli reporter

References

gitlab.eclipse.org/security/cve-assignement/-/issues/33

cve.org (CVE-2024-9342)

nvd.nist.gov (CVE-2024-9342)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-9342

Support options

Helpdesk Chat, Email, Knowledgebase