Orta CVSS 6
CVE-2025-54821: Fortiproxy: hatalı yetki yönetimi
Açıklama (NVD)
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command.
Özet bilgiler
- Ürün
- Fortinet Fortiproxy
- CVSS v3.1
- 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N - EPSS
- %0,19 (yüzdelik 8)
- CWE
- CWE-269
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortiproxy | 7.0.0 | — | 7.6.4 |
| fortinet-fortipam | 1.0.0 | — | 1.6.1 |
| fortinet-fortios | 6.4.0 | — | 7.6.4 |