CVE-2024-42465 Lack of resources and rate limiting - two factor authentication

Severity: Critical

CVE ID: CVE-2024-42465

Details

This advisory address a vulnerability where users can make unlimited number of two factor authentication login attempts.

Applicability

Impact

This vulnerability allows a user to make unlimited two factor authentication logins without any limitation.

Fix

This issue can be fixed by updating upKeeper Manager to the latest version.

Acknowledgements

This vulnerability was reported by Eslam Mohamed and Eslam Kamal.

Please contact our security team (secure@upkeeper.se) for security related questions and product support (help@upkeeper.se) for questions about our products or services.