FortiManager / FortiAnalyzer - Authorization bypass via key value controlled by user

An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiManager & FortiAnalyzer may allow a remote attacker with low privileges to read sensitive information via crafted HTTP requests.

amp attacker authorization bypass cwe fortianalyzer fortimanager http http requests information key key value low may privileges requests sensitive sensitive information value vulnerability