Description
Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiOS | Fortinet / FortiOS | >= 7.0.0, <= 7.0.16 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.0.0, <= 7.0.19 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.2.0, <= 7.2.12 | affected |