FortiSOAR - Improper Authorization in request headers

2023-03-0700:00:00

FortiGuard Labs

www.fortiguard.com

fortisoar

improper authorization

cwe-284

playbook component

http requests

0.001 Low

EPSS

Percentile

31.9%

JSON

An improper access control vulnerability [CWE-284] in FortiSOAR’s playbook component may allow an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests.

CPENameOperatorVersion
fortisoareq7.3.1
fortisoareq7.3.0

CPE	Name	Operator	Version
	fortisoar	eq	7.3.1
	fortisoar	eq	7.3.0

0.001 Low

EPSS

Percentile

31.9%

JSON

Related for FG-IR-23-050