Fortinet FortiManager和FortiAnalyzer 操作系统命令注入漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products from Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains...

OS command injection vulnerability in CLI

...

Protect

A buffer copy without checking size of input 'Classic Buffer Overflow'Â vulnerability CWE-120 in FortiAnalyzer, FortiManager, FortiOS and FortiProxy may allow a privileged attacker to execute arbitrary code or command via crafted CLI execute certificate remote, execute vpn certificate remote and...

Fortinet FortiManager 安全漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment a...

Fortinet FortiManager 缓冲区错误漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment a...

PT-2022-15346 · Fortinet · Fortisandbox +3

Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.0.1 and below, 6.4.6 and below FortiAnalyzer versions 7.0.2 and below, 6.4.7 and below FortiOS versions 6.2.x and 6.0.x FortiSandbox versions 4.0.x, 3.2.x and 3.1.x Description: An improper certificate validation issue...

Lack of certificate verification when establishing secure connections

...

多款Fortinet产品信任管理问题漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A trust management issue...

The vulnerabilities in the web interfaces of FortiSwitch network switches, FortiAnalyzer network firewalls, Fortinet FortiManager software for centralized device management, and FortiAP-S/W2 access point software allow attackers to trigger service interruptions.

The vulnerability in the web interface of the microprogramming software for network switches FortiSwitch, the FortiAnalyzer network firewall, the Fortinet FortiManager software for centralized device management, and the FortiAP-S/W2 access point software is related to uncontrolled resource...

The vulnerability of the software for centralized device management in Fortinet’s FortiManager system stems from insufficient verification of data authenticity. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for centralized device management in Fortinet FortiManager is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected informatio...

Fortinet Multiple Products Operating System Command Injection Vulnerability

Fortinet FortiManager, a centralized network security management platform, is a centralized network security reporting solution, Fortinet FortiAnalyzer. FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for the FortiGate, FortiWiFi, and FortiAP product...

CVE-2021-26104

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

CVE-2021-26104

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

CVE-2021-26104

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

Command injection

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

CVE-2021-26104

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

CVE-2021-26104

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

CVE-2021-26104

CVE-2021-26104 corresponds to multiple OS command injection vulnerabilities in Fortinet FortiManager (versions 6.2.7 and below, 6.4.5 and below, and all 6.2.x, 6.0.x, 5.6.x), FortiAnalyzer (same version ranges), and FortiPortal (5.2.5–5.3.5 and 6.0.4 and below). The flaws allow a local authentica...

CVE-2021-26104: Improper Neutralization of Special Elements used in an OS Command

Multiple OS command injection CWE-78 vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and belo...

The vulnerability of the fgfmsd software from Fortinet’s FortiManager device management system and FortiAnalyzer network monitoring system allows a malicious individual to execute arbitrary code with root privileges.

The vulnerability of the fgfmsd software in the Fortinet FortiManager device management system and the FortiAnalyzer network monitoring system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges b...