Lucene search
FortiGuard LabsFG-IR-18-014HistoryJun 22, 2018 - 12:00 a.m.
FortiAnalyzer and FortiManager admin user avatar setting improper access control
2018-06-2200:00:00
FortiGuard Labs
www.fortiguard.com
14
EPSS
0.002
Percentile
52.3%
An improper access control vulnerability exists in FortiAnalyzer and FortiManager, whereby a regular user of the GUI can edit the avatar picture of other users (including with higher privileges) with arbitrary content.
Related
cvelist
cvelist
CVE-2018-1354
2018-06-27 20:00:00
cve
cve
CVE-2018-1354
2018-06-27 20:29:03
nvd
nvd
CVE-2018-1354
2018-06-27 20:29:03
prion
prion
Improper access control
2018-06-27 20:29:00