Description (CNA)
An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny geolocalisation policy via timing the bypass with a GeoIP database update.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiOS | affected 7.2.0; affected 7.0.0 through 7.0.13; affected 6.4.0 through 6.4.14 |
| Fortinet / FortiProxy | affected 7.2.0 through 7.2.3; affected 7.0.0 through 7.0.9; affected 2.0.0 through 2.0.12 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.