Threats tagged 'ghsa-wxh9-84jx-g888'

CVE-2024-5617 is a vulnerability in an account lock feature that fails to enforce lockouts correctly on the primary user store when identical usernames exist in both primary and secondary user stores. The lockout condition only applies to the secondary user store account, allowing repeated authentication attempts on the primary account. This flaw enables brute force attacks against the primary user store account, potentially leading to unauthorized access to sensitive information or accounts.