A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution.
CVSS
6.5
EPSS
0%
KEV
No
Exploitation
unknown
CVE Published
1117d ago · NVD
Added to TCL Advisory
80d ago · TCL Advisory
NVD · Updated 80d ago