Skip to content
OpenAdvisories
Medium · 4.2 CVE-2023-37934 EUVD-2023-41787GHSA-c68r-72rr-cx8r

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attack…

Published Jan 10, 2024 · Updated Jun 17, 2025 · Assigned by fortinet

Description

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests in a high frequency.

Affected products

VendorProductAffectedFixed
Fortinet FortiPAM 1.0.0 – ≤ 1.0.3 —

References