Unrated severityNVD Advisory· Published Nov 20, 2013· Updated Apr 29, 2026
CVE-2013-6826
CVE-2013-6826
Description
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.
Affected products
7- cpe:2.3:h:fortinet:fortianalyzer-1000d:-:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortianalyzer-2000b:-:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortianalyzer-200d:-:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortianalyzer-3000d:-:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortianalyzer-300d:-:*:*:*:*:*:*:*
- cpe:2.3:h:fortinet:fortianalyzer-4000b:-:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortianalyzer_firmware:*:*:*:*:*:*:*:*Range: <=5.0.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.