Описание
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
3.7 Low
CVSS3
Дефекты
Связанные уязвимости
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
Уязвимость компонента Web Application Firewall контроллера доставки приложений Fortinet FortiADC, позволяющая нарушителю получить доступ к конфиденциальной информации
EPSS
3.7 Low
CVSS3