| Package | Affected versions | Patched versions |
|---|---|---|
| fortiauthenticator | ≥ 5.4.0, < 6.5.0 | 6.5.0 |
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free