FortiMail - Login mechanism without rate limitation

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail may allow an unauthenticated attacker to  perform a brute force attack on the affected endpoints via repeated login attempts.

attack attacker authentication brute cwe endpoints login login attempts may mechanism rate unauthenticated vulnerability webmail