Improper Authentication Management in FortiMail Webmail by Fortinet

CVE-2023-45582

Summary

An improper restriction of excessive authentication attempts exists in FortiMail webmail, versions 7.2.0 to 7.2.4, 7.0.0 to 7.0.6, and prior to 6.4.8. This vulnerability may allow an unauthorized attacker to exploit the system, potentially conducting brute force attacks on login endpoints by repetitively attempting to gain unauthorized access to user accounts. Due to inadequate safeguards against excessive login attempts, users and systems may face increased security risks.

References