CVE-2022-29056 in FortiMail

Sumário

de MITRE • 09/03/2023

A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Fortinet, Inc.
• Reservar: 11/04/2022
• Divulgação: 09/03/2023
• Moderação: aceite
• Entrada: VDB-222649
• CPE: pronto
• CWE: CWE-307 (confirmado)
• CVSS: 5.3 (NVD)
• EPSS: 0.01808
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-29056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-29056
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-29056/