CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

Input validation

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

Input validation

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

CVE-2023-22642 is an improper certificate validation vulnerability (CWE-295) in Fortinet FortiAnalyzer and FortiManager. Affects FortiAnalyzer/ FortiManager versions 6.4.8–6.4.10, 7.0.0–7.0.5, and 7.2.0–7.2.1, exposing remote, unauthenticated attackers to a Man-in-the-Middle on the link to the Fo...

CVE-2022-42477

Fortinet FortiAnalyzer is affected by CVE-2022-42477 due to an improper input validation vulnerability (CWE-20). The issue allows an authenticated attacker to disclose file system information via custom dataset SQL queries. Affected product versions include FortiAnalyzer 7.2.1 and earlier, 7.0.6 ...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

FortiAnalyzer - Improper input validation in custom dataset

An improper input validation vulnerability CWE-20 in FortiAnalyzer may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

Fortinet FortiAnalyzer 输入验证错误漏洞

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

FortiAnalyzer & FortiManager - Lack of client-side certificate validation when establishing secure connections with FortiGuard to download outbreakalert

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the remote FortiGuard server hosting outbreakalert ressources...

Fortinet FortiManager 信任管理问题漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet appliances and the ability to group appliances into different administrative domains ADOMs to further simplify multi-appliance security...

PT-2023-7378 · Fortinet · Fortiguard +2

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer and FortiManager versions 6.4.8 through 6.4.10 FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.5 FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.1 Description: The issue is related to an improper certificate...

The vulnerability of the FortiAnalyzer event monitoring and analysis tool, related to insufficient password protection, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FortiAnalyzer event monitoring and analysis tool is related to insufficient password protection. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information through a specially crafted request...

The vulnerabilities of the Fortinet FortiManager software, the FortiAnalyzer network firewall, the FortiSwitch network switches with embedded software, and the Fortinet FortiPortal security analysis and management tool allow attackers to disclose sensitive information.

The vulnerabilities of the Fortinet FortiManager device management software, FortiAnalyzer network monitoring software, FortiSwitch network switch software, and Fortinet FortiPortal security analysis and management tool are related to the lack of protection for sensitive data. Exploiting these...

The vulnerability of the FortiAnalyzer security event monitoring and analysis tool lies in the lack of a mechanism to neutralize elements in CSV files, allowing attackers to execute arbitrary code.

The vulnerability of the FortiAnalyzer event tracking and analysis tool lies in the absence of a mechanism to neutralize certain elements within the CSV file. Exploiting this vulnerability could allow an attacker to execute arbitrary code by inserting Excel formulas as names of macros within the...