Fortinet FortiWeb Information Disclosure Vulnerability (CNVD-2021-99665)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. Versions 6.4.1 and earlier and 6.3.15 and earlier contain a security vulnerability that attackers exploit to access log reports via their URLs.