Threats tagged 'ghsa-796h-99fj-c83r'

A buffer over-read vulnerability exists in Fortinet FortiOS versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, and all versions of 7.2. This flaw may allow an authenticated remote attacker to cause the device to return portions of its memory in a redirect response by submitting a specially crafted request. The vulnerability has a CVSS score of 4.3, indicating medium severity, and does not impact integrity or availability. No known exploits are reported in the wild, and no official patch information is provided in the available data.