FortiExtender OS command injection through execute date CLI command

2019-11-0100:00:00

FortiGuard Labs

www.fortiguard.com

0.002 Low

EPSS

Percentile

53.1%

JSON

An OS command injection vulnerability in FortiExtender CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted “execute date” commands.

CPENameOperatorVersion
fortiextendereq4.1.1
fortiextendereq4.0.0
fortiextendereq3.3.3
fortiextendereq3.3.2
fortiextendereq3.3.1
fortiextendereq3.3.0
fortiextendereq3.2.4
fortiextendereq3.2.3
fortiextendereq3.2.2
fortiextendereq3.2.1

Name	Operator	Version
fortiextender	eq	4.1.1
fortiextender	eq	4.0.0
fortiextender	eq	3.3.3
fortiextender	eq	3.3.2
fortiextender	eq	3.3.1
fortiextender	eq	3.3.0
fortiextender	eq	3.2.4
fortiextender	eq	3.2.3
fortiextender	eq	3.2.2
fortiextender	eq	3.2.1

Rows per page:

1-10 of 171

0.002 Low

EPSS

Percentile

53.1%

JSON

Related for FG-IR-19-273