← Database

CVE-2024-45589

MEDIUM CVSS: 5.9 Published: 2024-09-05 Modified: 2026-06-17

Description

RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts and allows a remote attacker to cause a denial of service via the username parameters.

Affected Platforms

Identityautomation Rapididentity

Weakness Type

CWE-307, CWE-307

References