Medium severity6.5NVD Advisory· Published Jun 27, 2018· Updated Jun 17, 2026

CVE-2018-1354

Description

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.

Affected products

Fortinet/Fortianalyzerllm-fuzzy
Range: <=5.6.5 and 6.0.0
Fortinet/Fortimanagerllm-fuzzy
Range: <=5.6.5 and 6.0.0
Fortinet, Inc./Fortinet FortiManager, FortiAnalyzerv5
Range: FortiManager 6.0.0, 5.6.5 and below versions

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/104537nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041182nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041183nvdThird Party AdvisoryVDB Entry
fortiguard.com/advisory/FG-IR-18-014nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000