CVEvulnerability

CVE-2022-26121

5.3 MEDIUM Published 2022-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-668

Description

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.

Affected configurations

• fortinet fortimanager (> 5.6.0 <= 5.6.11) • fortinet fortimanager (> 6.0.0 <= 6.0.11) • fortinet fortimanager (> 6.2.0 <= 6.2.9) • fortinet fortimanager (> 6.4.0 <= 6.4.8) • fortinet fortimanager (> 7.0.0 <= 7.0.3) • fortinet fortianalyzer (> 5.6.0 <= 5.6.11) • fortinet fortianalyzer (> 6.0.0 <= 6.0.11) • fortinet fortianalyzer (> 6.2.0 <= 6.2.9) • fortinet fortianalyzer (> 6.4.0 <= 6.4.8) • fortinet fortianalyzer (> 7.0.0 <= 7.0.3)

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References