FortiNAC - Improper access control on administrative panels

2023-06-1200:00:00

FortiGuard Labs

www.fortiguard.com

fortinac

access control

vulnerability

cwe-284

administrative interface

unauthorized jsp calls

crafted http requests

0.001 Low

EPSS

Percentile

44.7%

JSON

An access control vulnerability [CWE-284] in FortiNAC may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp calls via crafted HTTP requests.

CPENameOperatorVersion
fortinaceq9.4.2
fortinaceq9.4.1
fortinaceq9.4.0
fortinaceq9.2.8
fortinaceq9.2.7
fortinaceq9.2.6
fortinaceq9.2.5
fortinaceq9.2.4
fortinaceq9.2.3
fortinaceq9.2.2

Name	Operator	Version
fortinac	eq	9.4.2
fortinac	eq	9.4.1
fortinac	eq	9.4.0
fortinac	eq	9.2.8
fortinac	eq	9.2.7
fortinac	eq	9.2.6
fortinac	eq	9.2.5
fortinac	eq	9.2.4
fortinac	eq	9.2.3
fortinac	eq	9.2.2

Rows per page:

1-10 of 531

0.001 Low

EPSS

Percentile

44.7%

JSON

Related for FG-IR-22-332