This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.This issue affects CDeX application versions through 5.7.1.
References
| Link | Resource |
|---|---|
| https://cdex.cloud/ | Product |
| https://cert.pl/en/posts/2024/03/CVE-2024-2463/ | Third Party Advisory |
| https://cert.pl/posts/2024/03/CVE-2024-2463/ | Third Party Advisory |
| https://cdex.cloud/ | Product |
| https://cert.pl/en/posts/2024/03/CVE-2024-2463/ | Third Party Advisory |
| https://cert.pl/posts/2024/03/CVE-2024-2463/ | Third Party Advisory |
Configurations
History
17 Jun 2025, 13:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cdex:cdex:*:*:*:*:*:*:*:* | |
| References | () https://cdex.cloud/ - Product | |
| References | () https://cert.pl/en/posts/2024/03/CVE-2024-2463/ - Third Party Advisory | |
| References | () https://cert.pl/posts/2024/03/CVE-2024-2463/ - Third Party Advisory | |
| First Time |
Cdex
Cdex cdex |
21 Nov 2024, 09:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cdex.cloud/ - | |
| References | () https://cert.pl/en/posts/2024/03/CVE-2024-2463/ - | |
| References | () https://cert.pl/posts/2024/03/CVE-2024-2463/ - |
30 Oct 2024, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
21 Mar 2024, 15:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-21 15:16
Updated : 2025-06-17 13:49
NVD link : CVE-2024-2464
Mitre link : CVE-2024-2464
CVE.ORG link : CVE-2024-2464
JSON object : View
Products Affected
cdex
- cdex
CWE
CWE-203
Observable Discrepancy