An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.Referenceshttps://fortiguard.com/psirt/FG-IR-22-388http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html
