CVE-2023-26208
09.03.2023, 15:15
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sendingnumerous HTTP requests to the login form.Enginsight
Vendor | Product | Version |
---|---|---|
fortinet | fortiauthenticator | 5.4.0 ≤ 𝑥 < 6.5.0 |
𝑥
= Vulnerable software versions