Description
An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSIEM | 6.7.0, 6.6.0 – ≤ 6.6.3, 6.5.0 – ≤ 6.5.1, 6.4.0 – ≤ 6.4.2, 6.3.0 – ≤ 6.3.3, 6.2.0 – ≤ 6.2.1, 6.1.0 – ≤ 6.1.2, 5.4.0, 5.3.0 – ≤ 5.3.3, 5.2.5 – ≤ 5.2.8, 5.2.1 – ≤ 5.2.2, 5.1.0 – ≤ 5.1.3 | — |