CVE-2021-32603
05.08.2021, 11:15
A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortianalyzer | 5.6.0 ≤ 𝑥 < 6.2.8 |
| fortinet | fortianalyzer | 6.4.0 ≤ 𝑥 < 6.4.6 |
| fortinet | fortianalyzer | 7.0.0 ≤ 𝑥 < 7.0.1 |
| fortinet | fortimanager | 5.6.0 ≤ 𝑥 < 6.2.8 |
| fortinet | fortimanager | 6.4.0 ≤ 𝑥 < 6.4.6 |
| fortinet | fortimanager | 7.0.0 ≤ 𝑥 < 7.0.1 |
𝑥
= Vulnerable software versions