How severe is CVE-2024-45589?

CVE-2024-45589 has a CVSS v3 score of 5.9 (MEDIUM).

CVE-2024-45589

Name: rapididentity
Author: identityautomation

5.9MEDIUM

RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote attacker to cause a denial of service via the username paramet

Published: 9/5/2024Updated: 9/12/2024

Description

RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote attacker to cause a denial of service via the username parameters.

AI AnalysisPowered by AI

Affected Products

identityautomationrapididentity

References

https://benrogozinski.github.io/CVE-2024-45589/
ExploitThird Party Advisory
https://help.rapididentity.com/docs/rapididentity-lts-release-notes
Release Notes