CVE-2019-17654

Name of the Vulnerable Software and Affected Versions FortiManager versions 6.2.1 through 6.0.6 and below

Description The issue is related to insufficient verification of data authenticity, which may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack. This could impact the confidentiality, integrity, and availability of protected information.

Recommendations For FortiManager versions 6.2.1, 6.2.0, and 6.0.6, update to a version that addresses the insufficient verification of data authenticity issue. For FortiManager versions below 6.0.6, update to a version that addresses the insufficient verification of data authenticity issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.