CVE-2023-25606

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-23 in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the...

CVE-2023-25606

FortiAnalyzer and FortiManager management interfaces are affected by a Path Traversal vulnerability (CWE-23). The issue allows a remote, authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests. Affected versions include 7.2.0–7.2.1, 7.0...

Fortinet FortiManager和FortiAnalyzer 路径遍历漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products from Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains...

Exploit for Use of Hard-coded Credentials in Fortinet Fortianalyzer

Decrypt FortiManager configuration secrets CVE-2020-9289 CV...

PT-2023-5204 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0 through 7.2.2 FortiAnalyzer versions 6.0 through 7.2.2 Description: The issue is related to improper privilege management, which may allow a remote and authenticated API admin user to access certain system settings,...

CVE-2023-25609

A server-side request forgery SSRF vulnerability CWE-918 in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests...

Server side request forgery (ssrf)

A server-side request forgery SSRF vulnerability CWE-918 in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests...

CVE-2023-25609

Fortinet FortiManager and FortiAnalyzer GUI are affected by a server-side request forgery (SSRF) vulnerability (CWE-918) that may allow a remote, authenticated attacker to access unauthorized files and services via specially crafted web requests. Affected versions include FortiManager/ FortiAnaly...

CVE-2023-25609

A server-side request forgery SSRF vulnerability CWE-918 in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests...

CVE-2023-25609

A server-side request forgery SSRF vulnerability CWE-918 in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests...

Fortinet FortiManager 代码问题漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment a...

FortiManager & FortiAnalyzer - SSRF in FortiGuard Outbreak feature

A server-side request forgery SSRF vulnerability CWE-918 in FortiManager and FortiAnalyzer GUI may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

Input validation

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2023-22642

CVE-2023-22642 is an improper certificate validation vulnerability (CWE-295) in Fortinet FortiAnalyzer and FortiManager. Affects FortiAnalyzer/ FortiManager versions 6.4.8–6.4.10, 7.0.0–7.0.5, and 7.2.0–7.2.1, exposing remote, unauthenticated attackers to a Man-in-the-Middle on the link to the Fo...

PT-2023-7378 · Fortinet · Fortiguard +2

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer and FortiManager versions 6.4.8 through 6.4.10 FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.5 FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.1 Description: The issue is related to an improper certificate...

Fortinet FortiManager 信任管理问题漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet appliances and the ability to group appliances into different administrative domains ADOMs to further simplify multi-appliance security...