CVE-2018-1354

State: Published
Severity: Not scored
Published: Jun 27, 2018
Updated: Oct 25, 2024
Reserved: Dec 11, 2017

Description

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Fortinet FortiManager, FortiAnalyzerFortinet, Inc.	FortiManager 6.0.0, 5.6.5 and below versionsAffected FortiAnalyzer 6.0.0, 5.6.5 and below versionsAffected

References

1041183vdb-entry
https://fortiguard.com/advisory/FG-IR-18-014
1041182vdb-entry
104537vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.