Lucene search

K
fortinetFortiGuard LabsFG-IR-21-050
HistoryAug 03, 2021 - 12:00 a.m.

FortiManager & FortiAnalyzer - Improper validation of dispatcher socket parameters

2021-08-0300:00:00
FortiGuard Labs
www.fortiguard.com
12
fortimanager
fortianalyzer
ssrf vulnerability
cwe-918
web requests
server-side

EPSS

0.001

Percentile

28.4%

A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI may allow a remote and authenticated attacker to access unauthorized  files and services on the system via specifically crafted web requests.

EPSS

0.001

Percentile

28.4%

Related for FG-IR-21-050