Medium severity6.5NVD Advisory· Published Jun 27, 2018· Updated Jun 17, 2026
CVE-2018-1354
CVE-2018-1354
Description
An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.
Affected products
5cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: <=6.0.0
- (no CPE)range: <=5.6.5 and 6.0.0
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: <=6.0.0
- (no CPE)range: <=5.6.5 and 6.0.0
- Fortinet, Inc./Fortinet FortiManager, FortiAnalyzerv5Range: FortiManager 6.0.0, 5.6.5 and below versions
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/104537nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041182nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041183nvdThird Party AdvisoryVDB Entry
- fortiguard.com/advisory/FG-IR-18-014nvdVendor Advisory
News mentions
0No linked articles in our index yet.