| Package | Affected versions | Patched versions |
|---|---|---|
| fortimanager | = 6.4.4= 6.4.5 |
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free