Description (CNA)
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiManager | affected 7.6.0; affected 7.4.0 through 7.4.4; affected 7.2.0 through 7.2.7; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.14; affected 6.2.0 through 6.2.12 |
CWE
CWE-306
References
ADP enrichment
No English description supplied.