FG-IR-22-493: SSRF in FortiGuard Outbreak feature
A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-22-493?
The FG-IR-22-493 vulnerability has a high severity rating due to its potential for unauthorized access to sensitive files and services.
How do I fix FG-IR-22-493?
To mitigate FG-IR-22-493, update FortiManager and FortiAnalyzer to versions 7.2.2 or later, 7.0.7 or later, or 6.4.12 or later.
Who is affected by FG-IR-22-493?
FG-IR-22-493 affects authenticated users of FortiManager and FortiAnalyzer versions below the specified remedial updates.
What type of vulnerability is FG-IR-22-493?
FG-IR-22-493 is identified as a server-side request forgery (SSRF) vulnerability.
What can an attacker achieve with FG-IR-22-493?
An attacker exploiting FG-IR-22-493 can access unauthorized files and services on the FortiManager and FortiAnalyzer systems.