| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | = 7.2.0= 7.2.1≥ 6.4.8, ≤ 6.4.11≥ 7.0.0, ≤ 7.0.6 | |
| fortimanager | = 7.2.0= 7.2.1≥ 6.4.8, ≤ 6.4.11≥ 7.0.0, ≤ 7.0.6 |
A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free