CVE Vulnerabilities

CVE-2013-4604

Published: Jun 25, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role.

Affected Software

Name Vendor Start Version End Version
Fortios Fortinet * 5.0.2 (including)
Fortios Fortinet 5.0.1 (including) 5.0.1 (including)

References