NewsFortinet PSIRT
Autorisierungsumgehung durch benutzerkontrollierten Schlüssel in dmserver
Teaser aus der Quelle
Eine Autorisierungsumgehung durch einen benutzerkontrollierten Schlüssel [CWE-639] in FortiManager, FortiAnalyzer, FortiManager Cloud und FortiAnalyzer Cloud ermöglicht es einem authentifizierten Administrator, über speziell gestaltete HTTP-Anfragen auf andere VDOMs zuzugreifen. Ein Patch wird empfohlen.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Fortinet PSIRT lesenMehr zu user-controlled
Weitere Advisories
- Ohne BewertungCVE-2026-124278Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc_server and grpc allows an attacker to make a handler act on a resource oth…
- MittelCVE-2026-105880Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Con…
- HochCVE-2026-126429OpenEMR before 8.5.0 passes authenticated user-controlled HTML from the doc_lib.php content parameter to mPDF, which resolves local files and nested SVG reso…
- HochCVE-2026-13672An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1…
- Ohne Bewertungosv:CLEANSTART-2026-BG98783Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized s...
- KritischCVE-2026-126229A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnaly…
- HochCVE-2026-126218A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager…
- HochCVE-2026-126183A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager…
Weitere News-Einträge
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled key in GUINewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- SSA-777015 V1.0: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7NewsSiemens ProductCERT
Quelle: https://fortiguard.fortinet.com/psirt/FG-IR-26-244
ID