Skip to content
OpenAdvisories
Unscored CVE-2019-17654 EUVD-2019-7960GHSA-qm8w-7xj7-x5m6

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated …

Published Mar 15, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiManager Category: Network devices

Description

An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiManager 6.2.1, 6.2.0, 6.0.6 and below —

References