Fortinet FortiSIEM Resource Exhaustion Vulnerability Leading to TLS Denial-of-Service

A denial-of-service vulnerability has been identified in Fortinet FortiSIEM versions 5.3, 5.4, 6.x, 7.0, and 7.1.0 through 7.1.5. This vulnerability arises from an unlimited allocation of resources, allowing an attacker to consume all available connections and disrupt valid TLS traffic.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, where legitimate TLS traffic is interrupted due to the exhaustion of available connections.