EUVD-2024-55707

The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...

CVE-2024-6832

CVE-2024-6832 describes a flaw where the account locking mechanism does not trigger when secondary user stores are inaccessible, causing an inconsistent lockout state across configured stores. As a result, an attacker can perform repeated invalid credential attempts against accounts in reachable ...