Threats tagged 'ghsa-gqvm-4chf-8rf9'

An unintended proxy or intermediary ('confused deputy') vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This vulnerability may allow an authenticated attacker to execute commands outside the intended scope by sending specially crafted HTTP requests. The affected versions span several major releases of FortiAnalyzer and FortiManager. The vulnerability has a high severity rating with a CVSS score of 7.2, indicating significant potential impact on confidentiality, integrity, and availability.