Unscored CVE-2014-3115 EUVD-2014-3136GHSA-7qxv-9465-xvp7

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote…

Published May 8, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.

References

http://www.fortiguard.com/advisory/FG-IR-14-013/
VU#902790 third-party-advisory
20140507 Fortinet Fortiweb 5.1 contains a cross-site request forgery vulnerability (CVE-2014-3115) mailing-list
1030200 vdb-entry