CVE-2021-22124

Description

An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and FortiAuthenticator before 6.0.6 may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters.

Reserved 2021-01-04 | Published 2021-08-04 | Updated 2024-10-25 | Assigner fortinet

Problem types

Denial of service

Product status

FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0, 3.0.6, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0, FortiAuthenticator before 6.0.6
affected

References

fortiguard.com/advisory/FG-IR-20-170

cve.org (CVE-2021-22124)

nvd.nist.gov (CVE-2021-22124)

Download JSON