8.1
Élevée
CVE-2022-35846 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0…
Description
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiTester | Versions non publiées |
Autres CVE de Fortinet FortiTester
Les 8 CVE de Fortinet FortiTester →
CVE-2022-33870
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…
7.8
Élevée
CVE-2022-38372
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…
6.7
Moyenne
CVE-2022-33872
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
9.8
Critique
CVE-2022-33873
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
6.8
Moyenne