| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | ≥ 6.2.0, < 7.4.3 | 7.4.3 |
| fortianalyzer big data | ≥ 6.2.1, < 7.2.6 | 7.2.6 |
| fortimanager | ≥ 6.2.0, < 7.4.3 | 7.4.3 |
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free