| Package | Affected versions | Patched versions |
|---|---|---|
| forticlient | = 6.2.7= 7.0.0≥ 6.4.0, ≤ 6.4.6 |
An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free