← CVE Intelligence

CVE-2024-28825

Brute-force protection ineffective for some login methods PUBLISHED

Description (CNA)

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 (EOL) facilitates password brute-forcing.

Affected (CNA)

Vendor / productVersions
Checkmk GmbH / Checkmkaffected 2.3.0 before 2.3.0b5; affected 2.2.0 before 2.2.0p26; affected 2.1.0 before 2.1.0p43; affected 2.0.0 through 2.0.0p39

CWE

CWE-307

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.