← Back

CVE-2024-46667

nvd nist
Published: Jan 14, 2025Modified: Jul 16, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: psirt@fortinet.com (Secondary)

Description

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections.

Affected (11)

Products: Fortinet: Fortisiem
Fortinet
1 product
Fortisiem
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortisiem
From 5.3.0 to 5.3.3
Fortisiem
From 6.1.0 to 6.1.2
Fortisiem
From 6.2.0 to 6.2.1
Fortisiem
From 6.3.0 to 6.3.3
Fortisiem
From 6.4.0 to 6.4.4
Fortisiem
From 6.5.0 to 6.5.3
Fortisiem
From 6.6.0 to 6.6.5
Fortisiem
From 6.7.0 to 6.7.9
Fortisiem
From 7.0.0 to 7.0.3
Fortisiem
From 7.1.0 to 7.1.6
Fortisiem
Version 5.4.0

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.