CVE-2022-45861

CVE-2022-45861 describes an access of uninitialized pointer vulnerability (CWE-824) in the SSL VPN portal of Fortinet FortiOS (versions 7.2.0–7.2.3, 7.0.0–7.0.9, and before 6.4.11) and FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7, and before 2.0.11). A remote authenticated attacker could crash the sslvpn...

CVE-2022-45861

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated...

CVE-2022-45861

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated...

CVE-2022-41328

CVE-2022-41328 (Fortinet FortiOS path traversal) : A path traversal vulnerability in Fortinet FortiOS 7.2.0–7.2.3, 7.0.0–7.0.9, and pre-6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands (CWE-22). The issue is documented across mult...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

PT-2023-1654 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.3 Fortinet FortiOS versions 7.0.0 through 7.0.9 Fortinet FortiOS versions before 6.4.11 Description: The issue is related to an improper limitation of a pathname to a restricted directory...

Fortinet FortiOS 缓冲区错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...

PT-2023-1862 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.11 and earlier, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 FortiProxy versions 2.0.11 and earlier, 7.0.0 through 7.0.7, 7.2.0 through 7.2.1 Description: The issue is related to an access of uninitialized pointer vulnerabili...

Protect

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiOS and FortiProxy administrative interface may allow an unauthenticated attacker to obtain sensitive logging information on the device via crafted HTTP or HTTPs GET requests...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability ‘path traversal’ CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

Fortinet FortiOS 路径遍历漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam. A security vulnerabili...

Protect

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in FortiOS may allow a privileged attacker to read and write arbitrary files via crafted CLI commands...

Fortinet FortiOS 路径遍历漏洞

Fortinet FortiOS is a set of security operating systems dedicated to the FortiGate network security platform from the U.S. company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam, etc. SSL...

PT-2023-1860 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiProxy versions 7.0.0 through 7.0.7 FortiProxy versions 7.2.0 through 7.2.1 FortiOS versions 7.0.0 through 7.0.9 FortiOS versions 7.2.0 through 7.2.3 Description: The issue is related to insufficient protection of internal data in the...

Protect

A relative path traversal vulnerability CWE-23 in FortiOS and FortiProxy may allow privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests...

Protect

An access of uninitialized pointer vulnerability CWE-824 in the SSL-VPN portal of FortiOS & FortiProxy may allow a remote authenticated attacker to crash the sslvpn daemon via an HTTP GET request...

Vulnerabilities of FortiOS operating systems, FortiWeb network gateways for web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers, which allow attackers to disclose protected information

Vulnerabilities of FortiOS operating systems, FortiWeb network firewalls for web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers are related to improper verification of cryptographic signatures. Exploiting these vulnerabilities can allow attackers to disclose sensitive...

The vulnerabilities in the web interface of FortiOS, the local software product FortiSwitch Manager, and the proxy server FortiProxy, designed for protecting against internet attacks, allow attackers to read and write files on a basic Linux system.

The vulnerability in the web interface of FortiOS operating systems, the local software management platform FortiSwitch Manager, and the proxy server for internet attack protection, FortiProxy, is related to errors in processing the relative path to the directory. Exploiting this vulnerability...

The vulnerability of the FortiOS operating system and the centralized authentication and access control solution FortiAuthenticator, which involves unencrypted storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the FortiOS operating system and the centralized identity authentication and access control solution FortiAuthenticator is related to the unencrypted storage of confidential information. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorize...