Format string vulnerability in fazsvcd

A use of externally-controlled format string vulnerability CWE-134 in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud fazsvcd daemon may allow a remote privileged attacker with admin profile to execute arbitrary code or commands via specially crafted requests...

FortiAnalyzer Code Execution

The vulnerability of the FortiAnalyzer security event monitoring and analysis tool, the Fazsvcd module, is related to the use of an uncontrolled format string. Exploiting this vulnerability allows a attacker to execute arbitrary code or commands using specially created requests...

Format String Bug in fazsvcd

A use of externally-controlled format string vulnerability CWE-134 in FortiAnalyzer fazsvcd daemon may allow a remote privileged attacker with admin profile to execute arbitrary code or commands via specially crafted requests...

PT-2024-7305

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer versions 7.2.2 through 7.2.5 Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3 Description: The issue is related to the use of an externally-controlled format string in the FortiAnalyzer event tracking and analysis...