| Package | Affected versions | Patched versions |
|---|---|---|
| fortinac | ≥ 9.2.0, < 9.2.7≥ 9.4.0, < 9.4.2 | 9.2.79.4.2 |
| fortinac-f | < 7.2.0 | 7.2.0 |
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free