PSIRTAccess control bypass in logging component
Summary
An improper access control vulnerability [CWE-284] in FortiIsolator logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.
| Version | Affected | Solution |
|---|---|---|
| FortiIsolator 3.0 | Not affected | Not Applicable |
| FortiIsolator 2.4 | 2.4.3 through 2.4.4 | Upgrade to 2.4.5 or above |
| FortiIsolator 2.3 | 2.3 all versions | Migrate to a fixed release |
| FortiIsolator 2.2 | Not affected | Not Applicable |