7.0
High
CVE-2024-54024 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version 2.4.6 allows a privileged attacker with super-admin profile and CLI access to execute unauthorized code via specifically crafted HTTP requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiIsolator 2.4 | 2.4.3 → 2.4.6 | No fix stated |
Other CVEs of FortiIsolator
The 7 CVEs of FortiIsolator →
CVE-2024-33507
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…
7.0
High
CVE-2024-32124
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions…
4.0
Medium
CVE-2024-27779
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
6.3
Medium
CVE-2024-54025
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
6.5
Medium