A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/advisory/FG-IR-21-050 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2021-08-05T10:41:00
Updated: 2024-08-03T23:25:30.928Z
Reserved: 2021-05-11T00:00:00
Link: CVE-2021-32603
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-08-05T11:15:07.510
Modified: 2021-08-12T19:32:02.637
Link: CVE-2021-32603
Redhat
No data.