PT-2021-23048
CVE-2021-41013
·
تاريخ النشر
2021-12-08
·
تاريخ التحديث
2021-12-10
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
FortiWeb versions 6.4.1 and below
FortiWeb versions 6.3.15 and below
Description
An improper access control issue in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs.
Recommendations
For FortiWeb versions 6.4.1 and below, update to a version above 6.4.1 to resolve the issue.
For FortiWeb versions 6.3.15 and below, update to a version above 6.3.15 to resolve the issue.
As a temporary workaround, consider restricting access to the Report Browse section of Log & Report until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾