Description (CNA)
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiNAC | affected 9.4.0 through 9.4.1; affected 9.2.0 through 9.2.7; affected 9.1.0 through 9.1.9; affected 8.8.0 through 8.8.11; affected 8.7.0 through 8.7.6 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.