CVE-2024-42465: Lack of resources and rate limiting - two factor authentication
Published Aug 16, 2024
·Updated
Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.
Affected Software
1 affected component
upKeeper upKeeper Manager<=5.1.10
Event History
Aug 16, 2024
CVE Published
via MITRE·01:26 PM
Data Sourced
via MITRE·01:26 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42465?
CVE-2024-42465 is classified as a medium-severity vulnerability due to its potential for authentication abuse.
2
How do I fix CVE-2024-42465?
To fix CVE-2024-42465, upgrade upKeeper Manager to version 5.1.10 or later to implement proper rate limiting.
3
What products are affected by CVE-2024-42465?
CVE-2024-42465 affects upKeeper Manager versions up to 5.1.9.
4
What type of vulnerability is CVE-2024-42465?
CVE-2024-42465 is an Improper Restriction of Excessive Authentication Attempts vulnerability.
5
Can CVE-2024-42465 lead to data breaches?
Yes, CVE-2024-42465 can potentially lead to unauthorized access if exploited through excessive authentication attempts.