PT-2023-3351 · Fortinet · Fortisiem

Published 2023-06-09 · Updated 2023-06-17 · CVE-2022-42478

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSIEM versions prior to 7.0.0

Description The issue is related to an improper restriction of excessive authentication attempts, which may allow a non-privileged user with access to several endpoints to perform a brute force attack on these endpoints. This can be exploited by a remote attacker to bypass existing security restrictions.

Recommendations For FortiSIEM versions prior to 7.0.0, update to version 7.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive endpoints to minimize the risk of exploitation. Avoid using endpoints that are vulnerable to brute force attacks until the issue is resolved.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2023-03507

CVE-2022-42478

Affected Products

Fortisiem

References · 4

• https://fortiguard.com/psirt/FG-IR-22-258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42478 · Security Note
• https://bdu.fstec.ru/vul/2023-03507 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42478 · Vendor Advisory