| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | = 7.4.0= 7.4.1≥ 6.2.0, ≤ 6.2.12≥ 6.4.0, ≤ 6.4.14≥ 7.0.0, ≤ 7.0.11≥ 7.2.0, ≤ 7.2.3 | |
| fortimanager | = 7.4.0= 7.4.1≥ 6.2.0, ≤ 6.2.12≥ 6.4.0, ≤ 6.4.14≥ 7.0.0, ≤ 7.0.11≥ 7.2.0, ≤ 7.2.3 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free