CVE-2023-37934

published 2024-01-10

CVE-2023-37934: An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a…

Priority P4 34 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests in a high frequency.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortipam	—	—
fortinet	fortipam	>= 1.0.0 < 1.1.0	1.1.0
fortinet	fortipam	1.0.0 – 1.0.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770