CVE-2024-9342 Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts
MediumCVSS 6.3
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.glassfish.main.admingui/console-common(Maven) | <= 7.0.25 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 3.1.2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 3.1.2.2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.0-b33 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.0-b72 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.0-b90 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.1.1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 4.1.2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 5.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 5.0.1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 5.1.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 5.1.0-RC1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 5.1.0-RC2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0-M1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0-RC1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0-RC2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0-RC3 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.0.0-RC4 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.1.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.2 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.3 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.4 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 6.2.5 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0-M1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0-M10 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0-M2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0-M3 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.0-M4 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.1 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.10 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.11 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.12 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.13 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.14 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.15 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.16 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.17 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.18 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.19 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.2 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.20 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.21 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.22 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.23 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.24 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.25 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.3 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.4 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.5 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.6 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.7 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.8 | No fix listed |
| org.glassfish.main.admingui/console-common(Maven) | = 7.0.9 | No fix listed |
| Eclipse Foundation Eclipse GlassFish | = 5.1.0 | No fix listed |
| Eclipse Foundation Eclipse GlassFish | >= 6.0.0, <= 6.2.5 | No fix listed |
| Eclipse Foundation Eclipse GlassFish | >= 7.0.0, <= 7.0.25 | No fix listed |
| Eclipse Foundation Eclipse GlassFish | = 7.1.0 | No fix listed |
| Eclipse Foundation Eclipse GlassFish | >= 8.0.0, < 8.0.3 | 8.0.3 |
| eclipse glassfish | = 7.0.16 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- gitlab.eclipse.org issue-tracking
- gitlab.eclipse.org
- github.com