An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortiswitchmanager | Fortinet | 7.0.0 (including) | 7.0.0 (including) |
| Fortiswitchmanager | Fortinet | 7.0.1 (including) | 7.0.1 (including) |
| Fortiswitchmanager | Fortinet | 7.2.0 (including) | 7.2.0 (including) |
| Fortiswitchmanager | Fortinet | 7.2.1 (including) | 7.2.1 (including) |
| Fortiswitchmanager | Fortinet | 7.2.2 (including) | 7.2.2 (including) |