Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
访问控制不恰当
Vulnerability Title
Fortinet FortiADC 安全漏洞
Vulnerability Description
Fortinet FortiADC是美国飞塔（Fortinet）公司的一款应用交付控制器。 Fortinet FortiADC存在安全漏洞，该漏洞源于存在不当的访问控制漏洞，允许只读身份验证攻击者通过精心设计的HTTP或HTTPS请求执行某些写入操作。
CVSS Information
N/A
Vulnerability Type
N/A