CVE-2013-6826
20.11.2013, 14:12
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortianalyzer_firmware | 𝑥 ≤ 5.0.4 |
| fortinet | fortianalyzer-1000d | - |
| fortinet | fortianalyzer-2000b | - |
| fortinet | fortianalyzer-200d | - |
| fortinet | fortianalyzer-3000d | - |
| fortinet | fortianalyzer-300d | - |
| fortinet | fortianalyzer-4000b | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration