← Database

CVE-2022-26121

LOW CVSS: 3.7 Published: 2022-10-10 Modified: 2026-06-17

Description

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.

Affected Platforms

Fortinet FortianalyzerFortinet Fortimanager

Weakness Type

CWE-668

References