FortiPAM - Lack of rate control to protect against DoS attacks

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM may allow an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests at a high frequency.

attack attacker attacks control cwe denial of service denial of service attack dos high http https may protect rate requests resources service throttling vulnerability