FortiOS - REST API trusted host bypass

An improper access control vulnerability [CWE-284] in the FortiOS REST API component may allow an authenticated attacker to access a restricted resource from a non trusted host.

access access control api attacker bypass control cwe fortios host may non resource rest rest api restricted vulnerability