Fortiportal

DATE	CVE	VULNERABILITY TITLE	RISK
2017-05-27	CVE-2017-7337	Incorrect Permission Assignment for Critical Resource vulnerability in Fortinet Fortiportal An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request. network low complexity fortinet CWE-732 critical	9.1