critical9.8
CVE-2024-9342
Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts
Impact
In Eclipse GlassFish version 7.0.16 or earlier, it is possible to perform login brute force attacks as there is no limitation on the number of failed login attempts.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.glassfish.main.admingui:console-common | <= 7.0.25 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eclipse | Glassfish | Version 7.0.16 |