Vulnerabilities > Fortinet > Fortimanager > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-06-27 CVE-2018-1354 Incorrect Permission Assignment for Critical Resource vulnerability in Fortinet Fortimanager
An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.
network
low complexity
fortinet CWE-732
6.5