Lucene search
FortiGuard LabsFG-IR-22-026HistoryOct 10, 2022 - 12:00 a.m.
FortiAnalyzer & FortiManager - improper authorization to template image
2022-10-1000:00:00
FortiGuard Labs
www.fortiguard.com
15
fortianalyzer
fortimanager
improper authorization
template images
cwe-668
remote attacker
url path
vulnerability
EPSS
0.001
Percentile
48.1%
An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI may allow an unauthenticated
and remote attacker to access report template images via referencing the name in the URL path.
Related
cnvd
cnvd
Multiple Fortinet products vulnerable to information leakage
2022-10-12 00:00:00
cvelist
cvelist
CVE-2022-26121
2022-10-10 00:00:00
nvd
nvd
CVE-2022-26121
2022-10-10 14:15:09
prion
prion
Path traversal
2022-10-10 14:15:00
cve
cve
CVE-2022-26121
2022-10-10 14:15:09