Description (CNA)
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSIEM | affected 7.2.0 through 7.2.5; affected 7.1.0 through 7.1.7; affected 7.0.0 through 7.0.3; affected 6.7.0 through 6.7.9; affected 6.6.0 through 6.6.5; affected 6.5.0 through 6.5.3; affected 6.4.0 through 6.4.4; affected 6.3.0 through 6.3.3; affected 6.2.0 through 6.2.1; affected 6.1.0 through 6.1.2; affected 5.4.0; affected 5.3.0 through 5.3.3 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.
No references supplied.