Description
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSIEM | 7.2.0 – ≤ 7.2.5, 7.1.0 – ≤ 7.1.7, 7.0.0 – ≤ 7.0.3, 6.7.0 – ≤ 6.7.9, 6.6.0 – ≤ 6.6.5, 6.5.0 – ≤ 6.5.3, 6.4.0 – ≤ 6.4.4, 6.3.0 – ≤ 6.3.3, 6.2.0 – ≤ 6.2.1, 6.1.0 – ≤ 6.1.2, 5.4.0, 5.3.0 – ≤ 5.3.3 | — |
Advisories 1
- WID-SEC-2025-0532 Fortinet FortiSIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 11, 2025