12Mar
CVE-2023-36554 | Fortinet FortiManager up to 6.2.12/6.4.13/7.0.10/7.2.3/7.4.0 HTTP Request access control (FG-IR-23-103)
A vulnerability was found in Fortinet FortiManager up to 6.2.12/6.4.13/7.0.10/7.2.3/7.4.0. It has been classified as very critical. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2023-36554. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.