| Package | Affected versions | Patched versions |
|---|---|---|
| fortideceptor | = 3.1.0= 3.1.1= 4.1.0= 4.1.1= 4.2.0≥ 3.0.0, ≤ 3.0.2≥ 3.2.0, ≤ 3.2.2≥ 3.3.0, ≤ 3.3.3≥ 4.0.0, ≤ 4.0.2 | |
| fortisandbox | = 3.2.0= 3.2.1= 3.2.2= 3.2.3≥ 3.1.0, ≤ 3.1.5≥ 4.0.0, ≤ 4.0.2 |
An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free