PT-2023-3351 · Fortinet · Fortisiem

CVE-2022-42478 · Publicado 2023-06-09 · Atualizado 2023-06-17

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSIEM versions prior to 7.0.0

Description The issue is related to an improper restriction of excessive authentication attempts, which may allow a non-privileged user with access to several endpoints to perform a brute force attack on these endpoints. This can be exploited by a remote attacker to bypass existing security restrictions.

Recommendations For FortiSIEM versions prior to 7.0.0, update to version 7.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive endpoints to minimize the risk of exploitation. Avoid using endpoints that are vulnerable to brute force attacks until the issue is resolved.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

BDU:2023-03507

CVE-2022-42478

Produtos afetados

Fortisiem

Referências · 4

• https://fortiguard.com/psirt/FG-IR-22-258 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-42478 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-03507 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-42478 · Aviso do Fabricante