Multiple Fortinet products vulnerable to information leakage

Fortinet FortiManager and Fortinet FortiAnalyzer, both from Fortinet, are a centralized network security management platform. Fortinet FortiAnalyzer is a centralized network security reporting solution. The product is mainly used to collect network log data and analyze, report and archive operations of security events, network traffic, Web content, etc. in the logs through the reporting suite. Multiple Fortinet products are vulnerable to an information disclosure vulnerability that stems from the exposure of resources to the wrong domain, which can be exploited by an unauthenticated remote attacker to access report template images by referring to names in the URL path.