- Description
- An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows attacker to cause information disclosure via filter manipulation.
- Source
- psirt@fortinet.com
- NVD status
- Analyzed
- Products
- fortianalyzer
CVSS 3.1
- Type
- Secondary
- Base score
- 2.3
- Impact score
- 1.4
- Exploitability score
- 0.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- Severity
- LOW
- psirt@fortinet.com
- CWE-200
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "315D5DA2-C4F3-466E-912B-521624BF6EE4",
"versionEndExcluding": "7.2.8",
"versionStartIncluding": "6.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6A0D7EE3-6F66-44DB-AC17-BC8EB61F928C",
"versionEndExcluding": "7.4.5",
"versionStartIncluding": "7.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B2D08D6D-F909-4B6F-9223-6A2C50A453C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]