CVE-2021-41014

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.4.1 and below Fortinet FortiWeb versions 6.3.15 and below

Description The issue is related to uncontrolled resource consumption, allowing an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets.

Recommendations For Fortinet FortiWeb versions 6.4.1 and below, consider restricting access to the httpsd daemon to minimize the risk of exploitation until a patch is available. For Fortinet FortiWeb versions 6.3.15 and below, consider restricting access to the httpsd daemon to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.