CVE-2022-29056
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-29056
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
过多认证尝试的限制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fortinet FortiMail 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fortinet FortiMail是美国飞塔（Fortinet）公司的一套电子邮件安全网关产品。该产品提供电子邮件安全防护和数据保护等功能。 Fortinet FortiMail 6.40版本，6.20至6.24版本，6.0.9之前版本存在安全漏洞，该漏洞源于系统对过度身份验证尝试的不当限制。攻击者可利用该漏洞向登录表单发送大量 HTTP 请求来耗尽 CPU 和内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-29056
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/cnetsec/CVE-2022-29056 | POC Details |
| 2 | None | https://github.com/chessredoffsec/CVE-2022-29056 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-29056
请登录查看更多情报信息。
Same Patch Batch · Fortinet · 2023-03-09 · 3 CVEs total
| CVE-2023-26209 | 3.5 LOW | Fortinet FortiDeceptor 安全漏洞 |
| CVE-2023-26208 | 3.5 LOW | Fortinet FortiAuthenticator 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-307
- CVE-2020-37228
iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypa - CVE-2026-45010
phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-F - CVE-2025-64526
Strapi has a rate limit bypass on users-permissions plugin v - CVE-2025-62313
HCL AION is affected by a vulnerability where adequate prote - CVE-2026-44195
OPNsense: Authentication lockout bypass
V. Comments for CVE-2022-29056
No comments yet