FortiSOAR - Improper access control on gateway API

2022-05-0300:00:00

FortiGuard Labs

www.fortiguard.com

0.003 Low

EPSS

Percentile

68.5%

JSON

An improper access control vulnerability [CWE-284] in FortiSOAR may allow an unauthenticated attacker to access gateway API data via crafted HTTP GET requests.

CPENameOperatorVersion
fortisoareq7.0.3
fortisoareq7.0.2
fortisoareq7.0.1
fortisoareq7.0.0
fortisoareq6.4.4
fortisoareq6.4.3
fortisoareq6.4.1
fortisoareq6.4.0