Описание
An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.0.0 (включая)
cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.0024
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 9.1
github
больше 3 лет назад
An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.
EPSS
Процентиль: 47%
0.0024
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-732