CVE-2021-32600

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

Design/Logic Flaw

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

CVE-2021-32600: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

PT-2021-16956

Name of the Vulnerable Software and Affected Versions FortiManager versions 6.4.4 and 6.4.5 Description The issue is related to improper access control, allowing an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

Protect

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list. Â...

PT-2021-6854

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.6.x FortiOS versions 6.0.x FortiOS versions 6.2.0 through 6.2.9 FortiOS versions 6.4.0 through 6.4.6 FortiOS version 7.0.0 Description The issue is related to insufficient access control in the FortiOS CLI, allowing a local...

CVE-2018-1353

An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...

CVE-2018-1353: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...

PT-2018-11911

Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 6.0.1 and below Description An information disclosure issue allows a standard user with adom assignment to read the interface settings of vdoms unrelated to the assigned adom. Recommendations For Fortinet...

FortiManager allows unauthorized viewing of vdoms settings by any adom standard users

A standard user with adom assignment can read the interface settings of vdoms unrelated to his/her adom...

CVE-2017-7337: Incorrect Permission Assignment for Critical Resource

An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion...

PT-2017-17671

Name of the Vulnerable Software and Affected Versions Fortinet FortiPortal versions 4.0.0 and below Description The issue is related to improper Access Control, allowing an attacker to interact with unauthorized VDOMs or enumerate other ADOMs. This can be achieved via another user's stolen sessio...