Lucene search
HistoryJun 10, 2024 - 12:15 p.m.
CVE-2024-28833
cve-2024-28833
checkmk
2.3.0p6
2fa
authentication
vulnerability
brute-forcing
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms.
Affected configurations
Node
tribe29checkmkMatch2.3.0p1
ORtribe29checkmkMatch2.3.0p2
ORtribe29checkmkMatch2.3.0p3
ORtribe29checkmkMatch2.3.0p4
ORtribe29checkmkMatch2.3.0p5
References
Related
ubuntucve
ubuntucve
CVE-2024-28833
2024-06-10 00:00:00
vulnrichment
vulnrichment
CVE-2024-28833 Missing brute-force protection for two factor authentication
2024-06-10 11:55:50
cvelist
cvelist
CVE-2024-28833 Missing brute-force protection for two factor authentication
2024-06-10 11:55:50
cve
cve
CVE-2024-28833
2024-06-10 12:15:09
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
Related for NVD:CVE-2024-28833