medium4.3
CVE-2024-21761
An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organiz…
Impact
An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiportal | from 7.0.0 before 7.0.7 Version 7.2.0 |