Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiPortal Authorization Bypass Vulnerability Allowing Unauthorized Device Information Access

Vulnerability

An authorization bypass vulnerability has been identified in Fortinet FortiPortal versions 7.4.0, 7.2.0 through 7.2.5, and 7.0.0 through 7.0.8. This vulnerability allows an authenticated attacker to access unauthorized device information by modifying user-controlled keys in API requests.

Impact

Exploitation of this vulnerability could lead to unauthorized access to device information.

Added: Jun 10, 2025, 6:40 PM
Updated: Jun 10, 2025, 6:40 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
2.5
exploitability
4.5
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.