CVE-2022-29056

🗓️ 09 Mar 2023 14:54:52Reported by fortinetType

Improper authentication restriction in FortiMail 6.4.0, 6.2.0-6.2.4, and before 6.0.9 allows remote attacker to exhaust CPU and memory

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortimail	12 Mar 202502:20	–	githubexploit
BDU FSTEC	The vulnerability of Fortinet’s FortiDeceptor system for detecting and responding to external and internal security threats, along with the FortiAuthenticator identification system and the FortiMail email protection system, arises from insufficient restrictions on authentication attempts. This allows attackers to gain unauthorized access to protected information.	23 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-29056	9 Mar 202318:20	–	circl
CNNVD	Fortinet FortiMail 安全漏洞	9 Mar 202300:00	–	cnnvd
CNVD	Fortinet FortiMail Access Control Error Vulnerability (CNVD-2023-30849)	13 Mar 202300:00	–	cnvd
Cvelist	CVE-2022-29056	9 Mar 202314:54	–	cvelist
EUVD	EUVD-2022-33469	3 Oct 202520:07	–	euvd
Fortinet	FortiAuthenticator, FortiDeceptor & FortiMail - Improper restriction over excessive authenticationÂ attempts	7 Mar 202300:00	–	fortinet
NVD	CVE-2022-29056	9 Mar 202315:15	–	nvd
OSV	CVE-2022-29056	9 Mar 202315:15	–	osv

NVD

Node

fortinet fortimailRange6.0.0–6.0.10

fortinet fortimailRange6.2.1–6.2.5

fortinet fortimailMatch6.4.0

[
  {
    "vendor": "Fortinet",
    "product": "FortiMail",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "6.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.1",
        "lessThanOrEqual": "6.2.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.9",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "5.4.0",
        "lessThanOrEqual": "5.4.12",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-20-078

21 Nov 2024 06:58Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.13.7 - 5.3

EPSS0.24203

SSVC

CWE-307