1352 matches found
Fortinet Multiple Products Formatting String Error Vulnerability
Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologie...
Format string vulnerability in administrative interface
...
Improper access control in backup and restore features
...
Fortinet FortiManager 访问控制错误漏洞
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...
The vulnerability of the software for centralized device management by Fortinet’s FortiManager and the FortiAnalyzer network switch arises from errors in processing the relative path to the directory. This allows a perpetrator to execute arbitrary code.
The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiAnalyzer devices is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...
Fortinet FortiManager and FortiAnalyzer Information Disclosure Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager and FortiAnalyzer have an information disclosure vulnerability that can be exploited by attackers to...
CVE-2023-42791
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
CVE-2023-42791
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
Path traversal
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
CVE-2023-42791
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
EUVD-2023-47221
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
CVE-2023-42791
CVE-2023-42791 describes a relative path traversal in Fortinet FortiManager that allows an attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability affects FortiManager versions: 7.4.0, 7.2.0–7.2.3, 7.0.0–7.0.8, 6.4.0–6.4.12, and 6.2.0–6.2.11. The connected R...
CVE-2023-42791
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests...
The vulnerability of the software for central device management in Fortinet’s FortiManager, as well as the security monitoring and analysis tools FortiAnalyzer and FortiAnalyzer-BigData, allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData security monitoring and analysis tools, is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious...
CVE-2023-44253
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate...
Design/Logic Flaw
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate...
CVE-2023-44253
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate...
CVE-2023-44253
CVE-2023-44253 affects Fortinet FortiManager 7.4.0–7.4.1 and earlier 7.2.5, FortiAnalyzer 7.4.0–7.4.1 and earlier 7.2.5, and FortiAnalyzer-BigData before 7.2.5. Root cause is an information-disclosure flaw that lets an ADOM administrator enumerate other ADOMs and device names via crafted HTTP/HTT...
Fortinet FortiManager 信息泄露漏洞
Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager and FortiAnalyzer have an information disclosure vulnerability that can be exploited by attackers to...
PT-2024-1745 · Fortinet · Fortimanager +2
Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 7.4.0 through 7.4.1 and before 7.2.5 Fortinet FortiAnalyzer versions 7.4.0 through 7.4.1 and before 7.2.5 Fortinet FortiAnalyzer-BigData before 7.2.5 Description: The issue is related to the exposure of sensitiv...