PT-2023-1877 · Fortinet · Fortimail

Published 2023-03-07 · Updated 2023-03-15 · CVE-2022-29056

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions FortiMail versions 6.2.0 through 6.2.4 FortiMail version 6.4.0 FortiMail versions prior to 6.0.9

Description The issue is related to an improper restriction of excessive authentication attempts, allowing a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form. This can potentially lead to unauthorized access to protected information.

Recommendations For FortiMail versions 6.2.0 through 6.2.4, update to a version that includes a fix for this issue. For FortiMail version 6.4.0, update to a version that includes a fix for this issue. For FortiMail versions prior to 6.0.9, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the login form to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2023-01478

CVE-2022-29056

Affected Products

Fortimail

References · 6

• https://osv.dev/vulnerability/CVE-2022-29056 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-20-078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29056 · Security Note
• https://bdu.fstec.ru/vul/2023-01478 · Security Note
• https://t.me/cvenotify/45876 · Telegram Post
• https://t.me/cibsecurity/59732 · Telegram Post