CVE:CVE-2013-6826
CNNVD:CNNVD-201311-181
Fortinet FortiAnalyzer是美国飞塔（Fortinet）公司的一套集中式网络安全报告解决方案。该方案主要用于收集网络日志数据，并通过报告套件对日志中的安全事件、网络流量、Web内容等进行分析、报告、归档操作。
Fortinet FortiAnalyzer 5.0.5之前的版本中的cgi-bin/module//sysmanager/admin/SYSAdminUserDialog中存在安全漏洞，该漏洞源于程序没有正确过滤‘csrf_token’参数。远程攻击者可利用该漏洞实施跨站请求伪造攻击。
solution:Upgrade fortinet fortianalyzer_firmware to a higher version than 5.0.4,and avoid the version (,5.0.4]; Upgrade fortinet fortianalyzer-1000d to a higher version than -; Upgrade fortinet fortianalyzer-2000b to a higher version than -; Upgrade fortinet fortianalyzer-200d to a higher version than -; Upgrade fortinet fortianalyzer-3000d to a higher version than -; Upgrade fortinet fortianalyzer-300d to a higher version than -; Upgrade fortinet fortianalyzer-4000b to a higher version than -