CVE-2024-9342
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Eclipse Glassfish
- Vendor
- Eclipse Foundation
- Product
- Eclipse Glassfish
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.1.0 | affected | semver | Unavailable | Unavailable | None listed |
| 6.0.0 | affected | semver | Unavailable | 6.2.5 | None listed |
| 7.0.0 | affected | semver | Unavailable | 7.0.25 | None listed |
| 7.1.0 | affected | semver | Unavailable | Unavailable | None listed |
| 8.0.0 | affected | semver | 8.0.3 | Unavailable | None listed |