Lucene search
FortiGuard LabsFG-IR-21-170HistoryDec 06, 2022 - 12:00 a.m.
FortiSandbox & FortiDeceptor - Insufficient logging and lack of limitation of failed authentication attempts
2022-12-0600:00:00
FortiGuard Labs
www.fortiguard.com
17
fortisandbox
fortideceptor
insufficient logging
failed authentication
cwe-778
remote attacker
log entry
limitation
EPSS
0.001
Percentile
50.4%
An insufficient logging [CWE-778] vulnerability in FortiSandbox and FortiDeceptor may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts.
Related
cve
cve
CVE-2022-30305
2022-12-06 17:15:10
cvelist
cvelist
CVE-2022-30305
2022-12-06 16:00:54
nvd
nvd
CVE-2022-30305
2022-12-06 17:15:10
prion
prion
Design/Logic Flaw
2022-12-06 17:15:00