PT-2025-14460 · Alt Linux+2 · Alt Linux+2

Publicado 2025-04-01 · Atualizado 2026-02-13 · CVE-2024-36469

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue is related to the execution time for unsuccessful logins, which differs when using a non-existing username compared to an existing one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-208

Identificadores relacionados

ALT-PU-2025-5871

ALT-PU-2025-5998

BDU:2025-07164

CVE-2024-36469

DLA-4131-1

SUSE-SU-2026:0483-1

Produtos afetados

Alt Linux

Debian

Red Os

Referências · 33

• https://bdu.fstec.ru/vul/2025-07164 · Nota de Segurança
• https://bugzilla.suse.com/1240678 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix7-lts-server-mysql-cve-2024-36469-cve-2024-45700-cve-2024-42325-cve-53043099 · Nota
• https://twitter.com/threatcluster/status/2022385452523590002 · Publicação no Twitter
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://t.me/cvedetector/21850 · Publicação no Telegram
• https://t.me/cvetracker/20553 · Publicação no Telegram
• https://t.me/cveNotify/137826 · Publicação no Telegram
• https://suse.com/security/cve/CVE-2024-36469 · Nota
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2024-36469 · Nota de Segurança
• https://support.zabbix.com/browse/ZBX-26255 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1907339854523904345 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2024-36469 · Aviso do Fabricante