Skip to content
OpenAdvisories
Unscored CVE-2017-7337 EUVD-2017-16364GHSA-qwv8-9h62-365r

An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized …

Published May 26, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiPortal Category: Network devices

Description

An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal FortiPortal versions 4.0.0 and below —

References