Authorization

2024-03-1215:15:00

PRIOn knowledge base

www.prio-n.com

authorization

vulnerability

fortiportal

nvd

cwe-285

request payload

organizations

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.1%

JSON

An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.

References

fortiguard.com/psirt/FG-IR-24-016