3.5
Faible
CVE-2023-26208 A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x…
Description
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAuthenticator 6.4 | 6.4.0 → 6.4.6 | Pas de correctif indiqué |
| FortiAuthenticator 6.3 | 6.3.0 → 6.3.3 | Pas de correctif indiqué |
| FortiAuthenticator 6.2 | 6.2.0 → 6.2.1 | Pas de correctif indiqué |
| FortiAuthenticator 6.1 | 6.1.0 → 6.1.2 | Pas de correctif indiqué |
| FortiAuthenticator 6.0 | 6.0.0 → 6.0.7 | Pas de correctif indiqué |
Références
- fortiguard.com fortiguard.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiAuthenticator
Les 11 CVE de FortiAuthenticator →
CVE-2025-53379
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all…
7.0
Élevée
CVE-2026-44277
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0,…
9.1
Critique
CVE-2026-21743
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all…
6.8
Moyenne
CVE-2025-57823
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,…
2.6
Faible