FG-IR-20-170: Uncontrolled Resource Consumption (Denial of Service) in login module
An uncontrolled resource consumption (denial of service) vulnerability in FortiSandbox and FortiAuthenticator login modules may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-20-170?
The severity of FG-IR-20-170 is considered high due to its potential to enable denial of service attacks.
How do I fix FG-IR-20-170?
To fix FG-IR-20-170, update to the latest firmware version of FortiSandbox or FortiAuthenticator where the vulnerability is patched.
What types of devices are affected by FG-IR-20-170?
The devices affected by FG-IR-20-170 include FortiSandbox and FortiAuthenticator.
Can FG-IR-20-170 be exploited by an authenticated user?
FG-IR-20-170 can be exploited by an unauthenticated attacker, making it particularly critical to address.
What are the potential impacts of FG-IR-20-170?
The potential impacts of FG-IR-20-170 include the device becoming unresponsive, resulting in denial of service.