Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Fortinet FortiClientEMS 代码问题漏洞
Vulnerability Description
Fortinet FortiClientEMS是美国飞塔（Fortinet）公司的Fortinet提供的端点管理解决方案的一部分，旨在帮助组织有效地管理其网络中的终端设备，并提供端点安全性的监控和控制。 Fortinet FortiClientEMS 7.4.0至7.4.2版本和7.2.6之前版本存在代码问题漏洞，该漏洞源于容易受到服务端请求伪造攻击，可能导致经过身份验证的攻击者通过特制HTTP或HTTPS请求执行内部请求。
CVSS Information
N/A
Vulnerability Type
N/A