Skip to content
OpenAdvisories
Unscored CVE-2018-1354 EUVD-2018-11933GHSA-6893-wc3f-pwh2

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below ver…

Published Jun 27, 2018 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiManager, FortiAnalyzer Category: Network devices

Description

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiManager, FortiAnalyzer FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions —

References