Client-side enforcement of server-side security related to customer reports features

Client-side enforcement of server-side security vulnerability [CWE-602] in FortiPortal may allow an authenticated attacker with a customer account to access other customers information via crafted HTTP requests.

access account attacker client client-side customer customers cwe enforcement features http http requests information may reports requests security security vulnerability server vulnerability