| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | ≥ 1.0.0, < 2.0.0 | 2.0.0 |
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free