CVE-2013-6826

Published: Nov 20, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.

Affected (7)

Products: Fortinet: Fortianalyzer Firmware, Fortianalyzer 1000d, Fortianalyzer 2000b, Fortianalyzer 200d, Fortianalyzer 3000d, Fortianalyzer 300d, Fortianalyzer 4000b

Fortinet

7 products

Fortianalyzer Firmware

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortianalyzer Firmware	Up to 5.0.4
Fortinet Fortianalyzer 1000d	All versions
Fortinet Fortianalyzer 2000b	All versions
Fortinet Fortianalyzer 200d	All versions
Fortinet Fortianalyzer 3000d	All versions
Fortinet Fortianalyzer 300d	All versions
Fortinet Fortianalyzer 4000b	All versions