NetSight
high8.1

CVE-2022-42478

An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoint…

Impact

An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints.

Affected products

VendorProductAffected versions
FortinetFortisiem
from 5.1.0 through 5.1.3
from 5.3.0 through 5.3.3
from 6.3.0 through 6.3.3
Versions 5.2.1, 5.2.2, 5.2.5

Weakness classification

References