| Package | Affected versions | Patched versions |
|---|---|---|
| fortiweb | ≥ 7.0.0, < 7.2.11≥ 7.4.0, < 7.4.7≥ 7.6.0, < 7.6.3 | 7.2.117.4.77.6.3 |
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free