Lucene search

UpKeeperCVE-2024-42466

HistoryAug 16, 2024 - 2:15 p.m.

CVE-2024-42466

2024-08-1614:15:14

CWE-307

upKeeper

web.nvd.nist.gov

cve-2024-42466

upkeeper solutions

authentication abuse

upkeeper manager 5.1.9

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

9.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

Affected configurations

Nvd

Node

upkeeperupkeeper_managerRange<5.1.10

VendorProductVersionCPE
upkeeperupkeeper_manager*cpe:2.3:a:upkeeper:upkeeper_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
upkeeper	upkeeper_manager	*	cpe:2.3:a:upkeeper:upkeeper_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "upKeeper Manager",
    "vendor": "upKeeper Solutions",
    "versions": [
      {
        "lessThanOrEqual": "5.1.9",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

support.upkeeper.se/hc/en-us/articles/15432408367260-CVE-2024-42466-Lack-of-resources-and-rate-limiting-login

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

9.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

Related for CVE-2024-42466