Description
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiOS | Fortinet / FortiOS | >= 7.0.0, <= 7.0.16 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.0.0, <= 7.0.19 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.2.0, <= 7.2.12 | affected |