CVE-2024-55548

Description

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e.

Reserved 2024-12-07 | Published 2024-12-10 | Updated 2024-12-10 | Assigner CyberDanube

Problem types

CWE-703: Improper Check or Handling of Exceptional Conditions

Product status

Default status
unaffected

Any version
affected

Credits

P. Chistè finder

A. Falb finder

M. Selinger finder

M. Suchy finder

P. Oberndorfer finder

P. Maluenda finder

D. Sagl finder

M. Narbeshuber-Spletzer finder

J. Springer finder

P. Riedl finder

C. Hierzer finder

M. Pammer finder

References

cyberdanube.com/...as-multiple-vulnerabilities-in-oring-iap/ third-party-advisory

cve.org (CVE-2024-55548)

nvd.nist.gov (CVE-2024-55548)

Download JSON