Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions, 8.6 all versions, 8.5 all versions may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp calls via crafted HTTP requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Vulnerability Type
访问控制不恰当
Vulnerability Title
Fortinet FortiNAC 安全漏洞
Vulnerability Description
Fortinet FortiNAC是美国飞塔(Fortinet)公司的一套网络访问控制解决方案。该产品主要用于网络访问控制和物联网安全防护。 Fortinet FortiNAC 存在安全漏洞,该漏洞源于访问控制漏洞。以下版本受到影响:9.4.2版本及之前版本、9.2.7版本及之前版本、9.1所有版本、8.8所有版本、8.7所有版本、8.6所有版本、8.5所有版本。
CVSS Information
N/A
Vulnerability Type
N/A