| IR Number | FG-IR-20-078 |
| Date | Mar 7, 2023 |
| Severity |
Low |
| CVSSv3 Score | 3.5 |
| Impact | Denial of service |
| CVE ID | CVE-2022-29056 |
| Affected Products |
FortiMail
:
6.4.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.9, 5.4.8, 5.4.7, 5.4.6, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.12, 5.4.11, 5.4.10, 5.4.1, 5.4.0
FortiAuthenticator
:
6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.2, 6.2.1, 6.2.0, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.5.0, 5.4.1, 5.4.0, 5.3.1, 5.3.0, 5.2.2, 5.2.1, 5.2.0, 5.1.2, 5.1.1, 5.1.0
FortiDeceptor
:
3.1.1, 3.1.0, 3.0.2, 3.0.1, 3.0.0, 2.1.0, 2.0.0, 1.1.0, 1.0.1, 1.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiAuthenticator, FortiDeceptor & FortiMail - Improper restriction over excessive authentication attempts
Summary
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiAuthenticator, FortiDeceptor & FortiMail may allow a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
Affected Products
FortiAuthenticator version 6.4 all versions
FortiAuthenticator version 6.3 all versions
FortiAuthenticator version 6.2 all versions
FortiAuthenticator version 6.1 all versions
FortiAuthenticator version 6.0 all versions
FortiAuthenticator version 5.5 all versions
FortiAuthenticator version 5.4 all versions
FortiDeceptor version 3.1 all versions
FortiDeceptor version 3.0 all versions
FortiDeceptor version 2.1 all versions
FortiDeceptor version 2.0 all versions
FortiDeceptor version 1.1 all versions
FortiDeceptor version 1.0 all versions
FortiMail version 6.4.0
FortiMail version 6.2.1 through 6.2.4
FortiMail version 6.0.0 through 6.0.9
Solutions
Please upgrade to FortiAuthenticator version 6.5.0 or above,
Please upgrade to FortiDeceptor version 3.2.0 or above.
Please upgrade to FortiMail version 6.4.1 or above,
Please upgrade to FortiMail version 6.2.5 or above,
Please upgrade to FortiMail version 6.0.10 or above.