CVE-2023-37934

Summary

CVE-2023-37934 is a resource exhaustion vulnerability affecting all versions of FortiPAM 1.0 [CWE-770]. An attacker, once authenticated, can cause a denial of service by sending a large number of HTTP or HTTPS requests in rapid succession. The vulnerability arises due to the lack of proper resource allocation limits or throttling, enabling the attacker to consume system resources and render FortiPAM unresponsive. This issue poses a significant risk, as it can result in prolonged downtime for impacted organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.