CVE-2023-47111

Summary

CVE-2023-47111 affects ZITADEL's identity infrastructure, where the Lockout Policy feature allows administrators to limit the number of failed password attempts before locking a user account. However, an attacker was able to bypass this security measure by executing multiple parallel password checks, potentially trying out more combinations than the configured limit. This vulnerability has been addressed in versions 2.40.5 and 2.38.3 of ZITADEL's software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.