Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x6vp-5v5h-8v6q

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets

EPSS

Процентиль: 17%
0.00053
Низкий

8.6 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.6
nvd
около 1 года назад

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets

CVSS3: 8.6
fstec
около 1 года назад

Уязвимость графического интерфейса программного средства централизованного управления устройствами Fortinet FortiManager, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00053
Низкий

8.6 High

CVSS3

Дефекты

CWE-306