CWE-307 - Improper Restriction of Excessive Authentication Attempts

Description

If the software, used for taking preventive measures against untrusted authentication, protects the system uncorrectly, attackers can easily get access to the vulnerable account by using different passwords during multiple authentication.
The weakness is introduced during Architecture and Design stage.

Latest vulnerabilities for CWE-307

Multiple vulnerabilities in Baxter Life2000 Ventilation System 2024-11-19
High No

Brute-force protection bypass in Keycloak 2024-09-18
Medium Yes

Multiple vulnerabilities in QNAP QTS and QuTS hero 2024-09-09
Low Yes

Improper Restriction of Excessive Authentication Attempts in Windmill 2024-09-06
Low Yes

Multiple vulnerabilities in upKeeper Manager 2024-08-26
High Yes

Multiple vulnerability in Siemens SINEC Traffic Analyzer 2024-08-14
Medium Yes

Multiple vulnerabilities in Siemens Location Intelligence 2024-08-14
Medium Yes

Multiple vulnerabilities in Adobe Commerce and Magento Open Source 2024-08-14
Critical Yes

Multiple vulnerabilities in Microsoft GroupMe 2024-07-26
High Yes

Multiple vulnerabilities in IBM Storage Defender - Resiliency Service 2024-07-24
High Yes

References

Description of CWE-307 on Mitre website