Description
A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAnalyzer | 7.4.0, 7.2.0 – ≤ 7.2.3, 7.0.0 – ≤ 7.0.9, 6.4.0 – ≤ 6.4.13, 6.2.0 – ≤ 6.2.12 | — |