An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Fortinet | FortiManager | 7.6.0 – ≤ 7.6.4, 7.4.0 – ≤ 7.4.10, 7.2.0 – ≤ 7.2.12, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | |
| Fortinet | FortiManager Cloud | 7.6.2 – ≤ 7.6.4, 7.4.1 – ≤ 7.4.10, 7.2.1 – ≤ 7.2.12, 7.0.1 – ≤ 7.0.16, 6.4.1 – ≤ 6.4.7 | |
| fortinet | fortimanagercloud | 7.6.4 |
Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.
