CVE-2022-29056 in FortiMail

Riassunto

di MITRE • 09/03/2023

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Fortinet, Inc.
• Prenotare: 11/04/2022
• Divulgazione: 09/03/2023
• Moderazione: accettato
• Voce: VDB-222649
• CPE: pronto
• CWE: CWE-307 (confermato)
• CVSS: 5.3 (NVD)
• EPSS: 0.01808
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-29056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-29056
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-29056/