CVE-2024-28833

Опубликовано: 10 июн. 2024

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

EPSS Низкий

Описание

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms.

Ссылки

https://checkmk.com/werk/16830
Vendor Advisory
https://checkmk.com/werk/16830
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*

cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*

cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*

cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*

cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00331

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVE-2024-28833

CVSS3: 5.9

ubuntu

больше 1 года назад

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms.

CVE-2024-28833

CVSS3: 5.9

debian

больше 1 года назад

Improper restriction of excessive authentication attempts with two fac ...

GHSA-59h5-f896-qx2f

CVSS3: 5.9

github

больше 1 года назад

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms.

EPSS

Процентиль: 56%

0.00331

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-307