CVE-2018-1354

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
Fortinet, Inc.Fortinet FortiManager, FortiAnalyzerFortiManager 6.0.0, 5.6.5 and below versions; FortiAnalyzer 6.0.0, 5.6.5 and below versions

References

Timeline

Published
Jun 27, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135407.5The mintToken function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-135417.5The mintToken function of a smart contract implementation for CryptoLeu, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135427.5The mintToken function of a smart contract implementation for ZIBToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135437.5The mintToken function of a smart contract implementation for GemstoneToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-135447.5The mintToken function of a smart contract implementation for Numisma, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135457.5The mintToken function of a smart contract implementation for HashShield, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-135467.5The mintToken function of a smart contract implementation for CCASH, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-135477.5The mintToken function of a smart contract implementation for Providence Crypto Casino (PVE) (Contract Name: ProvidenceCasinoToken), an EtheCVE-2018-135487.5The mintToken function of a smart contract implementation for Mimicoin, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135497.5The mintToken function of a smart contract implementation for NeuroToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-13556.1An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allowCVE-2018-135507.5The mintToken function of a smart contract implementation for Coquinho Coin (CQNC) (Contract Name: CoquinhoERC20), an Ethereum token, has an
CVE-2018-1354: Medium severity, CVSS 6.5 | Vulnix