Description
An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWebManager | 5.8.0 | — |
References
- 101953 vdb-entry
- https://fortiguard.com/advisory/FG-IR-17-248
- 1039892 vdb-entry