Skip to content
fr Sign in
6.7 Medium

CVE-2022-35844 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management…

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiTester Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiTester

The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line… 7.8 High CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0… 6.7 Medium CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 6.8 Medium
Track this CVE