PT-2022-21876

Name of the Vulnerable Software and Affected Versions FortiTester versions 2.3.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0 Description The issue is related to an improper neutralization of special elements used in an OS Command, which may allo...

CVE-2022-33872: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in t...