Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cf8f-f7r9-xpmh

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests.

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests.

EPSS

Процентиль: 33%
0.00132
Низкий

8.1 High

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 8.1
nvd
около 1 года назад

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests.

CVSS3: 8.1
fstec
около 2 лет назад

Уязвимость консоли сервера для управления программами Fortinet FortiClient Enterprise Management Server (EMS), позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force)

EPSS

Процентиль: 33%
0.00132
Низкий

8.1 High

CVSS3

Дефекты

CWE-307