| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | > 5.6.0, ≤ 5.6.11> 6.0.0, ≤ 6.0.11> 6.2.0, ≤ 6.2.9> 6.4.0, ≤ 6.4.8> 7.0.0, ≤ 7.0.3 | |
| fortimanager | > 5.6.0, ≤ 5.6.11> 6.0.0, ≤ 6.0.11> 6.2.0, ≤ 6.2.9> 6.4.0, ≤ 6.4.8> 7.0.0, ≤ 7.0.3 |
An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free