Fortinet FortiWeb Incorrect User Management Vulnerability Allowing Dashboard Manipulation

Vulnerability

A vulnerability allowing incorrect user management has been identified in Fortinet FortiWeb versions 7.6.2 and prior, 7.4.6 and prior, 7.2.10 and prior, and 7.0.11 and prior. This vulnerability may enable an authenticated attacker with at least read-only admin rights to manipulate the dashboards of other administrators by sending crafted requests.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications on the dashboards of other administrators, potentially disrupting management activities or obscuring important information.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM