NVD

Id
86014  
Name
CVE-2017-7337  
Description
An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-06-03  
Published
2017-05-26  
Modified Date
2017-05-31  
Seq
2017-7337  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67942 JVNDB-2017-004224 Fortinet FortiPortal におけるアクセス制御に関する脆弱性 Fortinet FortiPortal には、アクセス制御に関する脆弱性が存在します。 CVE-2017-7337 0 CVE-2017-7337 86014 6.4 9.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004224.html 2017-05-15 2017-06-20 View