CVE-2024-1104CWE-307

Temporary denial of service during a brute force attack

High · published February 22, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-02-22T11:33Z
EPSS history
Timeline
  • 22 FEB 11:33Z
    Temporary denial of service during a brute force attack
    cvelistv5