Description (CNA)
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiRecorder | affected 6.4.0 through 6.4.3; affected 6.0.0 through 6.0.11 |
CWE
CWE-400
References
- https://fortiguard.com/psirt/FG-IR-22-388
- http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.