CVE-2022-35846
18.10.2022, 14:15
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortitester | 2.3.0 ≤ 𝑥 < 3.9.2 |
| fortinet | fortitester | 4.0.0 ≤ 𝑥 < 4.2.1 |
| fortinet | fortitester | 7.0.0 ≤ 𝑥 < 7.1.1 |
𝑥
= Vulnerable software versions