CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
14.0%
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests.
Vendor | Product | Version | CPE |
---|---|---|---|
fortinet | fortianalyzer | * | cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* |
fortinet | fortianalyzer | 7.4.0 | cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:* |
fortinet | fortianalyzer | 7.4.1 | cpe:2.3:a:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:* |
fortinet | fortimanager | * | cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* |
fortinet | fortimanager | 7.4.0 | cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:* |
fortinet | fortimanager | 7.4.1 | cpe:2.3:a:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:* |
[
{
"vendor": "Fortinet",
"product": "FortiManager",
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.4.0",
"lessThanOrEqual": "7.4.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.2.0",
"lessThanOrEqual": "7.2.3",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.11",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.0",
"lessThanOrEqual": "6.4.14",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.2.0",
"lessThanOrEqual": "6.2.12",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiAnalyzer",
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.4.0",
"lessThanOrEqual": "7.4.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.2.0",
"lessThanOrEqual": "7.2.3",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.11",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.0",
"lessThanOrEqual": "6.4.14",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.2.0",
"lessThanOrEqual": "6.2.12",
"status": "affected"
}
]
}
]