The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData tools for security event monitoring and analysis, arises from incorrect restrictions on the path to the restricted-access directory. This allows an attacker to gain access to and read/write arbitrary files in the directory.

The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData security monitoring and analysis tools, is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

CVE-2022-39950

An improper neutralization of input during web page generation vulnerability CWE-79 exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low privilege level attacker to perform an XSS attack via...

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4,...

CVE-2024-50566

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1, FortiManager Cloud 7.4.0 through 7.4.4, FortiManager Cloud 7.2.2 through 7.2.7, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through...

CVE-2024-48889

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software, as well as the FortiAnalyzer security event monitoring and analysis tools, allows attackers to exploit their privileges.

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software, as well as the FortiAnalyzer security event monitoring and analysis tools, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of the software for centralized device management in Fortinet FortiManager, as well as security event monitoring and analysis tools FortiAnalyzer, arises due to errors in processing the relative path to the directory. This allows a malicious actor to execute arbitrary code.

The vulnerability of the software for centralized device management of Fortinet FortiManager, as well as security event monitoring and analysis tools FortiAnalyzer, is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the software for centralized device management in Fortinet’s FortiManager system lies in errors in processing the relative path to the directory. This allows a malicious user to delete any files from the file system.

The vulnerability of the software for centralized device management in Fortinet’s FortiManager lies in errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to delete arbitrary files from the file system by sending specially crafted reques...

Fortinet FortiManager Path Traversal Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

Fortinet FortiManager Operating System Command Injection Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

The vulnerability of the graphical interface of the Fortinet FortiManager software, a centralized device management tool, allows a hacker to execute arbitrary commands.

The vulnerability of the graphical interface of the Fortinet FortiManager device management software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

The vulnerability of the graphical interface of the Fortinet FortiManager software, a centralized device management system, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the graphical interface of the Fortinet FortiManager device management software is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the command-line interface (CLI) of the Fortinet FortiManager device management software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the command-line interface CLI of the Fortinet FortiManager device management software is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the graphical interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis software allows a malicious individual to write arbitrary files and execute arbitrary code.

The vulnerability of the graphical interface of the Fortinet FortiManager device management center and the Fortinet FortiAnalyzer event monitoring and analysis tool is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious...

The vulnerability of the CSFD software of the Fortinet FortiManager device allows a intruder to execute arbitrary commands.

The vulnerability of the Fortinet FortiManager device management software allows for arbitrary commands to be executed by a malicious actor who operates remotely. This vulnerability is related to the lack of measures taken to neutralize special elements used within the operating system...

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker ...

CVE-2024-45331

A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1 through 7.2.6, FortiAnalyzer Cloud 7....

CVE-2024-45331

A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiAnalyzer Cloud versions 7.4.1...

CVE-2024-45331

CVE-2024-45331 is a privilege-escalation flaw caused by incorrect privilege assignment in Fortinet FortiAnalyzer (versions 6.4.0–6.4.15, 7.0.0–7.0.13, 7.2.0–7.2.5, 7.4.0–7.4.3) and FortiManager (6.4.0–6.4.15, 7.0.0–7.0.13, 7.2.0–7.2.5, 7.4.0–7.4.2) as well as FortiAnalyzer Cloud (6.4.1–6.4.7, 7.0...

CVE-2024-45331

A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1 through 7.2.6, FortiAnalyzer Cloud 7....