CVE-2024-9342 - CVE House
Back to Database
Status published Medium CVE-2024-9342

In Eclipse GlassFish versions before 8.0.3 it is possible to...

Vulnerability Description

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of failed login attempts. GlassFish 8.0.3 adds automatic attack protection documented in https://glassfish.org/docs/latest/security-guide.html#brute-force-attack-protection .

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-9342

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Marco Ventura
  • Claudia Bartolini
  • Andrea Carlo Maria Dattola
  • Debora Esposito
  • Massimiliano Brolli

References

More from Eclipse Foundation

View All →
CVE-2025-7962
In Jakarta Mail versions prior to 2.0.2 it is possible...
Medium 6
CVE-2025-6705
A vulnerability in the Eclipse Open VSX Registry’s automated publishing...
High 7.6
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality...
High 8.7
CVE-2025-55100
Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()
Low 2.4
CVE-2025-55099
Potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate()
Low 2.4

Affected Vendor

Eclipse Foundation

View all reports →

Affected Software

Eclipse Glassfish
Vulnerable Versions:
5.1.0, 6.0.0, 7.0.0, 7.1.0, 8.0.0

Timeline

Official Publish: July 16th, 2025
Last Modified: June 18th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-307

MITRE ATT&CK TTPs

T1110 Brute Force
Credential Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1562 Impair Defenses
Defense Evasion