中
4.8
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows...
CVE-2024-5563
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 修正版 |
|---|---|---|---|
| WSO2 | WSO2 Identity Server |
7.0.0 以上 7.0.0.37 未満 |
7.0.0.37 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This oversight permits attackers to bypass the intended protection mechanism.
Brute force attacks, if successful, can lead to unauthorized access to user accounts and sensitive information by systematically attempting various credential combinations.
出典: NIST National Vulnerability Database NVD GitHub Advisory
参照URL
- web security.docs.wso2.com
- web nvd.nist.gov
- web security.docs.wso2.com
- web github.com