Total vulnerabilities in the database
An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 and below, version 6.0.14 and below, version 5.3.8 and below may allow a remote authenticated user with at least read-only permissions to access to other organization endpoints via crafted GET requests.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortiportal | 5.3.0 | 5.3.8.x |
| fortinet / fortiportal | 6.0.0 | 6.0.14.x |
| fortinet / fortiportal | 7.0.0 | 7.0.7 |
| fortinet / fortiportal | 7.2.0 | 7.2.2 |