1569 matches found
Fortinet FortiManager and FortiAnalyzer Operating System Command Injection Vulnerabilities
Fortinet FortiManager and Fortinet FortiAnalyzer are both products from Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains...
PT-2023-6006 · Fortinet · Fortimanager
Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.2.0 through 7.2.3 FortiManager version 7.4.0 Description: The issue is related to an improper neutralization of special elements used in an os command, which may allow an attacker to execute unauthorized code or comman...
PT-2023-5995 · Fortinet · Fortianalyzer +2
Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0 through 7.2.2 FortiAnalyzer versions 6.0 through 7.2.2 FortiADC versions 6.0 through 7.1.0 Description: The issue is related to insufficient argument validation in a command, which can be exploited to execute arbitra...
PT-2023-8719 · Fortinet · Fortimanager
Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.2.0 through 6.2.11 Fortinet FortiManager versions 6.4.0 through 6.4.12 Fortinet FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiManager version 7.4.0...
Improper inter ADOM access control
...
CVE-2023-42788: Improper Neutralization of Special Elements used in an OS Command
An improper neutralization of special elements used in an os command 'OS Command Injection' vulnerability CWE-78 in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local...
CVE-2023-41838: Improper Neutralization of Special Elements used in an OS Command
An improper neutralization of special elements used in an os command 'os command injection' in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli...
OS command injection
...
Path traversal via unrestricted file upload
...
Syslog not protected by an extra layer of authentication
...
Command injection due to an unsafe usage of function
...
Arbitrary file deletion
...
Fortinet FortiManager Security Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different administrative domains ADOMs to further simplify multi-device security deployme...
CVE-2023-44249: Authorization Bypass Through User-Controlled Key
An authorization bypass through user-controlled key CWE-639 vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests...
PT-2023-5994
Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 7.4.0 and before 7.2.3 Fortinet FortiAnalyzer versions 7.4.0 and before 7.2.3 Description The issue is related to the implementation of client-side security features. It may allow a remote attacker with low...
CVE-2023-42787: Client-Side Enforcement of Server-Side Security
A client-side enforcement of server-side security CWE-602 vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution...
Fortinet FortiManager and FortiAnalyzer Security Vulnerabilities
Fortinet FortiManager and Fortinet FortiAnalyzer are both products from Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains...
Unprivileged user can access web console and run some unauthorized commands
...