CPE Details
Fortinet FortiAuthenticator 6.4.3
6.4.3
2023-03-13
17h03 +00:00
17h03 +00:00
2023-03-21
16h55 +00:00
16h55 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortiauthenticatorVersion
6.4.3Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow an attacker to to redirect users to an arbitrary website via a crafted URL. | 6.1 |
Moyen |
||
| An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the "reset-password" page. | 6.1 |
Moyen |
||
| A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form. | 5.3 |
Moyen |
