CVE-2024-9342

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-9342
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-9342.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-9342
Aliases
Published
2025-07-16T11:15:23Z
Modified
2025-07-18T17:44:29.393214Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Eclipse GlassFish version 7.0.16 or earlier it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts.

References

Affected packages

Git / github.com/eclipse-ee4j/glassfish

Affected ranges

Type
GIT
Repo
https://github.com/eclipse-ee4j/glassfish
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a048a744e5104c529ff62802b1733796eb938b74

Affected versions

5.*

5.1.0

6.*

6.0.0
6.0.0-M2-servlet5
6.0.0-M3-2020-10-04
6.1.0-M1
6.2.1
6.2.2
6.2.3
6.2.4
6.2.5

7.*

7.0.0
7.0.0-28-04-2022
7.0.1
7.0.10
7.0.11
7.0.12
7.0.13
7.0.14
7.0.15
7.0.16
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
7.0.8
7.0.9

Other

M2-servlet5
initial-contribution