PT-2023-1736 · Fortinet · Fortiauthenticator

Published 2023-03-07 · Updated 2023-03-15 · CVE-2023-26208

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Fortinet FortiAuthenticator versions 6.4.x and earlier

Description The issue is related to an improper restriction of excessive authentication attempts, allowing a remote unauthenticated attacker to partially exhaust CPU and memory by sending numerous HTTP requests to the login form. This can lead to a denial of service.

Recommendations For Fortinet FortiAuthenticator versions 6.4.x and earlier, consider restricting access to the login form to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the number of HTTP requests to the login form to prevent CPU and memory exhaustion. Restrict access to the vulnerable component to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2023-01327

CVE-2023-26208

Affected Products

Fortiauthenticator

References · 6

• https://fortiguard.com/psirt/FG-IR-20-078 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01327 · Security Note
• https://osv.dev/vulnerability/CVE-2023-26208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26208 · Security Note
• https://t.me/cvenotify/45870 · Telegram Post
• https://t.me/cibsecurity/59728 · Telegram Post