CVE-2024-6832

CVE-2024-6832 describes a flaw where the account locking mechanism does not trigger when secondary user stores are inaccessible, causing an inconsistent lockout state across configured stores. As a result, an attacker can perform repeated invalid credential attempts against accounts in reachable ...