CVE-2021-32589

A Use After Free CWE-416 vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 an...

CVE-2021-32589

creationtimestamp| type| source ---|---|--- 2024-12-19 12:36:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113679517704779961 2024-12-19 13:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdn4btu27 2024-12-19 14:49:09+00:00| seen|...

CVE-2021-32589

A Use After Free CWE-416 vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 an...

CVE-2021-32589

CVE-2021-32589 describes a remote, unauthenticated Use-After-Free in the fgfmsd daemon of Fortinet FortiManager and FortiAnalyzer. The flaw in the fgfm port handling (memory after free) allows a non-authenticated attacker to execute arbitrary code with root privileges by sending a crafted request...