CVE-2022-30305

An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...

CVE-2022-30305

CVE-2022-30305 describes an insufficient logging flaw (CWE-778) in FortiSandbox and FortiDeceptor products that could allow a remote attacker to repeatedly enter incorrect credentials without generating log entries and with no limit on failed attempts. Affected: FortiSandbox versions 3.1.0–4.0.2 ...