Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2024-9342

In Eclipse GlassFish version 7.0.16 or earlier it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts.

VectorNETWORK

PublishedJul 16, 2025, 11:15

Published Byemo@eclipse.org

Base Score

Score9.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.glassfish.main.admingui:console-common(Maven)0N/AN/A

References

https://gitlab.eclipse.org/security/cve-assignement/-/issues/33

Weakness Type

CWE-307

CVSS Metrics

Base Score

6.3

Vector String

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityMedium

Version

4.0

Attack Vector (AV)

ADJACENT