要点
- CVE-2024-9342 是影响 org.glassfish.main.admingui:console-common, glassfish (eclipse) 的严重 (CVSS 9.8)漏洞。
- 未来 30 天内被利用的概率（EPSS）：0.48%，高于 41.2% 的漏洞。
- 暂无已修复版本：请关注参考资料中的厂商公告。
Description
In Eclipse GlassFish version 7.0.16 or earlier, it is possible to perform login brute force attacks as there is no limitation on the number of failed login attempts.
NVD description
In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .
org.glassfish.main.admingui:console-common 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free