Description (CNA)
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiManager | affected 7.0.0 through 7.0.1; affected 6.4.0 through 6.4.7; affected 6.2.0 through 6.2.8 |
CWE
CWE-286
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.