Fortinet Fortigate Double free in cache management (FG-IR-23-196)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-196 advisory. - A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1...

Vulnerabilities fixed in Fortinet FortiOS

Fortinet has fixed vulnerabilities in FortiOS, as used in FortiProxy and FortiPAM. An unauthenticated malicious person could exploit the vulnerability with reference CVE-2023-47536 to exploit a security measure to bypass and route traffic through the system that should not be allowed should be...

CVE-2023-41678

A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request...

CVE-2023-41678

CVE-2023-41678 centers on a double-free in Fortinet FortiOS (7.0.0–7.0.5) and FortiPAM (1.0.0–1.0.3, 1.1.0–1.1.1) that allows an attacker to execute arbitrary code or commands via a specially crafted request. Affected components include FortiOS’s HTTPSd daemon and FortiPAM. The exploitation impac...