Back

CVE-2024-45523

Sept. 18, 2024, 6:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Bravura Security Fabric

  • 12.3.x before 12.3.5.32784
  • 12.4.x before 12.4.3.35110
  • 12.5.x before 12.5.2.35950
  • 12.6.x before 12.6.2.37183
  • 12.7.x before 12.7.1.38241

Source

cve@mitre.org

Tags

cve@mitre.org
2024-09-18
CVE-2024-45523

CVE-2024-45523 details

Published : Sept. 18, 2024, 6:15 p.m.
Last Modified : Sept. 18, 2024, 6:15 p.m.

Description

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://www.bravurasecurity.com/cve-2024-45523-resource-leak-in-api-after-a-failed-login-attempt cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.