CVE-2024-42466 Lack of resources and rate limiting - login

Severity: Critical

CVE ID: CVE-2024-42466

Details

This advisory address a vulnerability where users can make unlimited number of login attempts (username and password).

Applicability

Impact

This vulnerability allows a user to make unlimited logins without any limitation (username and password).

Fix

This issue can be fixed by updating upKeeper Manager to the latest version.

Acknowledgements

This vulnerability was reported by Eslam Mohamed and Eslam Kamal.

Please contact our security team (secure@upkeeper.se) for security related questions and product support (help@upkeeper.se) for questions about our products or services.