CVE-2017-14191

Description

An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie.

Reserved 2017-09-07 | Published 2018-03-20 | Updated 2024-10-25 | Assigner fortinet

Problem types

Improper Access Control

Product status

5.6.0 and above
affected

References

www.securityfocus.com/bid/103430 (103430) vdb-entry

fortiguard.com/advisory/FG-IR-17-279

cve.org (CVE-2017-14191)

nvd.nist.gov (CVE-2017-14191)

Download JSON