| Package | Affected versions | Patched versions |
|---|---|---|
| fortimanager | ≥ 6.2.0, < 6.2.9≥ 6.4.0, < 6.4.8≥ 7.0.0, < 7.0.2 | 6.2.96.4.87.0.2 |
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free