Live › vulnerability › CVE-2024-2323
Go to dashboardWhen password history validation is enabled, the RemoteUserStoreManagerService does not limit repeated password change attempts. An attacker can guess a user's password repeatedly and take over the account.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker to repeatedly attempt password guesses for a user account without being adequately restricted.
Exploiting this vulnerability enables an attacker to discover a user's password through brute force, leading to account impersonation. The success rate of such an attack is influenced by the complexity of the targeted user's password, with simpler passwords increasing the likelihood of compromise.
This page as .md · .json · in your agent: get_signal("CVE-2024-2323")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.