Protect

2023-06-1200:00:00

FortiGuard Labs

www.fortiguard.com

null pointer dereference

cwe-476

fortios

ssl-vpn

authenticated attacker

crash

daemon

http requests

proxy endpoint

JSON

A NULL pointer dereference vulnerability [CWE-476] in FortiOS may allow an authenticated attacker to crash the SSL-VPN daemon via specially crafted HTTP requests to the /proxy endpoint

CPENameOperatorVersion
fortioseq7.2.4
fortioseq7.2.3
fortioseq7.2.2
fortioseq7.2.1
fortioseq7.2.0
fortioseq7.0.11
fortioseq7.0.10
fortioseq7.0.9
fortioseq7.0.8
fortioseq7.0.7