| Package | Affected versions | Patched versions |
|---|---|---|
| fortiweb | ≥ 6.3.6, ≤ 6.3.21≥ 6.4.0, ≤ 6.4.2≥ 7.0.0, ≤ 7.0.4 |
An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free