medium4.2
CVE-2025-62439
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 thro…
Impact
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinet FortiOS 7.6.0 | through 7.6.4 |
| FortiOS 7.4.0 | through 7.4.9 |
Versions were read from the advisory text. No structured product data has been published for this record yet.