Description
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fortinet FortiADC
Default version status: unaffected
7.4.0 to ≤ 7.4.1affected7.2.0 to ≤ 7.2.3affected7.1.0 to ≤ 7.1.4affected7.0.0 to ≤ 7.0.5affected6.2.0 to ≤ 6.2.6affected