description: An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiOS
vendor: Fortinet
versions:
status: affected, version: 6.2.1
status: affected, version: 6.2.0
status: affected, version: 6.0.8 and below until 5.4.0
}