Design/Logic Flaw

2021-11-0219:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs.

CPENameOperatorVersion
fortiportalge4.0.0
fortiportallt6.0.6

CPE	Name	Operator	Version
	fortiportal	ge	4.0.0
	fortiportal	lt	6.0.6

References

fortiguard.com/advisory/FG-IR-21-109