CVE-2024-28825CWE-307

Brute-force protection ineffective for some login methods

Medium · published April 24, 2024

CVSS v3.1
5.9
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 (EOL) facilitates password brute-forcing.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-04-24T11:25Z
EPSS history
Timeline
  • 24 APR 11:25Z
    Brute-force protection ineffective for some login methods
    cvelistv5