Total vulnerabilities in the database
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortianalyzer | 6.2.0 | 6.2.12.x |
| fortinet / fortimanager | 6.2.0 | 6.2.12.x |
| fortinet / fortianalyzer | 7.4.0 | 7.4.0.x |
| fortinet / fortianalyzer | 7.2.0 | 7.2.3.x |
| fortinet / fortimanager | 7.4.0 | 7.4.0.x |
| fortinet / fortimanager | 7.2.0 | 7.2.3.x |
| fortinet / fortianalyzer | 6.4.0 | 6.4.14.x |
| fortinet / fortimanager | 6.4.0 | 6.4.14.x |
| fortinet / fortimanager | 7.0.0 | 7.0.11.x |
| fortinet / fortianalyzer | 7.0.0 | 7.0.11.x |
| fortinet / fortimanager | 7.4.1 | 7.4.1.x |
| fortinet / fortianalyzer | 7.4.1 | 7.4.1.x |