| Package | Affected versions | Patched versions |
|---|---|---|
| forticlientems | ≥ 6.2.0, ≤ 6.2.9≥ 6.4.0, ≤ 6.4.9≥ 7.0.0, < 7.0.11≥ 7.2.0, < 7.2.5 | 7.0.117.2.5 |
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free