Exploit público

Authorization bypass through user-controlled key in dmserver

CVSSv3 Score: 9.1 An Authorization Bypass Through User-Controlled Key [CWE-639] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud could allow an authenticated administrator to access to other VDOMs via specially crafted HTTP requests. Revised on 2026-11-10 00:00:00

Este es el aviso número 76 de Fortinet PSIRT en pwned.cl.

CategoríaFortinet PSIRT

Fuente: Fortinet PSIRT