FortiNAC - Unauthenticated access to administrative operations

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortinac

improper authorization

vulnerability

cwe-285

administrative operations

http post requests

unauthenticated attacker

software

0.003 Low

EPSS

Percentile

65.5%

JSON

An improper authorization vulnerability [CWE-285] in FortiNAC may allow an unauthenticated attacker to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.

CPENameOperatorVersion
fortinaceq9.4.1
fortinaceq9.4.0
fortinaceq9.2.6
fortinaceq9.2.5
fortinaceq9.2.4
fortinaceq9.2.3
fortinaceq9.2.2
fortinaceq9.2.1
fortinaceq9.2.0