Vulnerabilities > CVE-2024-38176 - Improper Restriction of Excessive Authentication Attempts vulnerability in Microsoft Groupme

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
high complexity
microsoft
CWE-307

Summary

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.

Vulnerable Configurations

Part Description Count
Application
Microsoft
1