fortinet fortiswitchmanager, fortinet fortiproxy, fortinet fortipam +1 lainnya
CVSS 8.1 · High EPSS 0,59%
Kerentanan Authentication Bypass Using an Alternate Path or Channel pada fortinet fortiswitchmanager, fortinet fortiproxy +2 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fortinet | fortiswitchmanager | Versi 7.0.0 hingga sebelum 7.0.4 |
| fortinet | fortiswitchmanager | Versi 7.2.0 hingga sebelum 7.2.4 |
| fortinet | fortiproxy | Versi 7.0.0 hingga sebelum 7.0.16 |
| fortinet | fortiproxy | Versi 7.2.0 hingga sebelum 7.2.9 |
| fortinet | fortiproxy | Versi 7.4.0 hingga sebelum 7.4.3 |
| fortinet | fortipam | Versi 1.0.0 hingga 1.2.0 |
| fortinet | fortios | Versi 6.0.0 hingga sebelum 6.2.17 |
| fortinet | fortios | Versi 6.4.0 hingga sebelum 6.4.16 |