VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 10, 2022· Updated Oct 22, 2024

CVE-2022-26121

CVE-2022-26121

Description

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.

Affected products

3
  • Fortinet/FortiAnalyzer and FortiManager GUIdescription
  • Fortinet/Fortianalyzerllm-fuzzy
    Range: 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11
  • Fortinet/Fortimanagerllm-fuzzy
    Range: 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.