1352 matches found
Syslog not protected by an extra layer of authentication
...
Fortinet FortiManager Security Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different administrative domains ADOMs to further simplify multi-device security deployme...
PT-2023-9784 · Fortinet · Fortianalyzer +2
Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions prior to 7.4.2 Fortinet FortiAnalyzer versions prior to 7.4.2 Fortinet FortiAnalyzer-BigData versions prior to 7.2.5 Description: The issue is related to exposure of sensitive information to an unauthorized acto...
The vulnerability of the software interface for Fortinet FortiManager, a centralized device management system, and FortiAnalyzer, a security event monitoring and analysis tool, allows a malicious individual to gain unauthorized access to protected information and enhance their privileges.
The vulnerability of the software interface for centralized device management in Fortinet FortiManager, as well as the event monitoring and analysis tool FortiAnalyzer, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
CVE-2023-36638
An improper privilege management vulnerability CWE-269 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may...
Privilege escalation
An improper privilege management vulnerability CWE-269 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may...
CVE-2023-36638
Fortinet CVE-2023-36638 is an improper privilege management (CWE-269) vulnerability affecting FortiManager and FortiAnalyzer. The flaw allows a remote, authenticated API admin user to access certain system settings (e.g., mail server settings) through the API by leveraging a stolen GUI session ID...
CVE-2023-36638
An improper privilege management vulnerability CWE-269 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may...
CVE-2023-36638
An improper privilege management vulnerability CWE-269 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may...
Fortinet FortiManager Security Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different administrative domains ADOMs to further simplify multi-device security deployme...
Improper privilege management on API requests
...
CVE-2022-22305
An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...
Input validation
An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...
CVE-2022-22305
An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...
CVE-2022-22305
An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...
CVE-2022-22305
CVE-2022-22305 describes an improper certificate validation (CWE-295) in Fortinet products: FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x. The vulnerability may allow a network-adjacent, ...
The vulnerability of the software interface for centralized device management in Fortinet FortiManager and FortiAnalyzer allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager and FortiAnalyzer devices is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of the software for centralized device management of FortiManager and the FortiAnalyzer network interface layer, related to insufficient checking of incoming requests on the server side, allows a attacker to perform an SSRF attack.
The vulnerability of the software for centralized device management of FortiManager and the network interface of FortiAnalyzer is related to insufficient checking of incoming requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack...
Buffer overflow
A buffer copy without checking size of input 'classic buffer overflow' in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0.2 and below, version 6.4.7 and below, version...