> Broken access control on API endpoints
[DATE: 09/12/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.2
An Improper access control vulnerability [CWE-284] in FortiSOAR may allow Information disclosure to an authenticated attacker via crafted requests
Revised on 2025-12-09 00:00:00