Description (CNA)
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSIEM | affected 6.7.0 through 6.7.4; affected 6.6.0 through 6.6.3; affected 6.5.0 through 6.5.1; affected 6.4.0 through 6.4.2; affected 6.3.0 through 6.3.3; affected 6.2.0 through 6.2.1; affected 6.1.0 through 6.1.2; affected 5.4.0; affected 5.3.0 through 5.3.3; affected 5.2.5 through 5.2.8; affected 5.2.1 through 5.2.2; affected 5.1.0 through 5.1.3 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No references supplied.