CVE-2022-26121
An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortimanager | 5.6.0.x | 5.6.11.x |
| fortinet / fortimanager | 6.0.0.x | 6.0.11.x |
| fortinet / fortimanager | 6.2.0.x | 6.2.9.x |
| fortinet / fortimanager | 6.4.0.x | 6.4.8.x |
| fortinet / fortimanager | 7.0.0.x | 7.0.3.x |
| fortinet / fortianalyzer | 5.6.0.x | 5.6.11.x |
| fortinet / fortianalyzer | 6.0.0.x | 6.0.11.x |
| fortinet / fortianalyzer | 6.2.0.x | 6.2.9.x |
| fortinet / fortianalyzer | 6.4.0.x | 6.4.8.x |
| fortinet / fortianalyzer | 7.0.0.x | 7.0.3.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime