Improper access control

2024-01-1018:15:00

PRIOn knowledge base

www.prio-n.com

fortinet

fortiportal

access control

privilege escalation

http requests

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

JSON

A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its privilege via specifically crafted HTTP requests.

CPENameOperatorVersion
fortiportalge7.0.0
fortiportalle7.0.6
fortiportalge7.2.0
fortiportalle7.2.1

Name	Operator	Version
fortiportal	ge	7.0.0
fortiportal	le	7.0.6
fortiportal	ge	7.2.0
fortiportal	le	7.2.1

References

fortiguard.com/psirt/FG-IR-23-395