| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 5.6.0, < 6.2.8≥ 6.4.0, < 6.4.6≥ 7.0.0, < 7.0.1 | 6.2.86.4.67.0.1 |
| fortimanager | ≥ 5.6.0, < 6.2.8≥ 6.4.0, < 6.4.6≥ 7.0.0, < 7.0.1 | 6.2.86.4.67.0.1 |
A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free