CVE-2022-38377 | BDVDB-2026-189355 Detail

Description#

An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and authenticated admin user assigned to a specific ADOM to access other ADOMs information such as device information and dashboard information.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-11-25Record published in the CVE List.
2. Version 22024-10-22Most recent update recorded in the CVE List.