An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests in a high frequency.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-23-226 | Vendor Advisory |
Configurations
History
18 Jan 2024, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet fortipam |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | () https://fortiguard.com/psirt/FG-IR-23-226 - Vendor Advisory | |
| CPE | cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:* |
10 Jan 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-10 18:15
Updated : 2024-01-18 13:55
NVD link : CVE-2023-37934
Mitre link : CVE-2023-37934
JSON object : View
Products Affected
fortinet
- fortipam
CWE
CWE-770
Allocation of Resources Without Limits or Throttling