CVE-2021-41014

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@fortinet.com

Published

2021-12-08

Last modified

2024-10-25

Weaknesses

CWE-400

Affected products

• Fortinet Fortiweb (Fortinet)
• Fortiweb (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-131