CVE-2018-1354

Опубликовано: 27 июн. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.

Ссылки

http://www.securityfocus.com/bid/104537
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041182
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041183
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-18-014
Vendor Advisory
http://www.securityfocus.com/bid/104537
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041182
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041183
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-18-014
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*

Версия до 6.0.0 (включая)

cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*

Версия до 6.0.0 (включая)

EPSS

Процентиль: 42%

0.00204

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-6893-wc3f-pwh2