Description (CNA)
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / Fortinet FortiManager | affected FortiManager 6.4.3, 6.2.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.