Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-45589
HistorySep 05, 2024 - 12:00 a.m.

CVE-2024-45589

2024-09-0500:00:00
mitre
github.com
rapididentity
denial of service
remote attacker
username parameters
cve-2024-45589

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote attacker to cause a denial of service via the username parameters.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:identityautomation:rapididentity_lts:*:*:*:*:*:*:*:*"
    ],
    "vendor": "identityautomation",
    "product": "rapididentity_lts",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2023.0.2"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:identityautomation:rapididentity_cloud:*:*:*:*:*:*:*:*"
    ],
    "vendor": "identityautomation",
    "product": "rapididentity_cloud",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2024.08.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-45589