CVE-2022-29056 in FortiMail

Resumen

por MITRE • 2023-03-09

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Fortinet, Inc.
• Reservar: 2022-04-11
• Divulgación: 2023-03-09
• Moderación: aceptado
• Artículo: VDB-222649
• CPE: listo
• CWE: CWE-307 (confirmado)
• CVSS: 5.3 (NVD)
• EPSS: 0.01808
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-29056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-29056
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-29056/