| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 5.6.0, ≤ 5.6.11≥ 6.0.0, ≤ 6.0.11≥ 6.2.0, ≤ 6.2.9≥ 6.4.0, ≤ 6.4.7≥ 7.0.0, < 7.0.3 | 7.0.3 |
| fortimanager | ≥ 5.6.0, ≤ 5.6.11≥ 6.0.0, ≤ 6.0.11≥ 6.2.0, ≤ 6.2.9≥ 6.4.0, ≤ 6.4.7≥ 7.0.0, < 7.0.3 | 7.0.3 |
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free