Fortinet FortiClientEMS Excessive Authentication Attempts Brute Force Vulnerability

A vulnerability allowing brute force attacks on the FortiClientEMS console has been identified in FortiClientEMS versions 7.2.0 through 7.2.4 and prior to 7.0.10. This issue arises from improper restrictions on excessive authentication attempts, enabling an unauthenticated attacker to exploit the vulnerability via crafted HTTP or HTTPS requests.

Impact

Exploitation of this vulnerability could lead to successful brute force attacks, allowing attackers to gain unauthorized access to the FortiClientEMS console.