7.5
High
CVE-2021-22124 An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0…
Description
An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and FortiAuthenticator before 6.0.6 may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiSandbox, FortiAuthenticator | Versions not published |