FortiNAC - open redirect in defaultUrl parameter
Summary
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
Affected Products
At least
FortiNAC-F version 7.2.0
FortiNAC version 9.4.0 through 9.4.1
FortiNAC 9.2 all versions
FortiNAC 9.1 all versions
FortiNAC 8.8 all versions
FortiNAC 8.7 all versions
Solutions
Please upgrade to FortiNAC version 9.4.2 or above
Please upgrade to FortiNAC-F version 7.2.1 or above