6.7
Medium
CVE-2022-22298 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator…
Description
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiIsolator 2.3 | 2.3.0 → 2.3.3 | No fix stated |
| FortiIsolator | 2.2.0 | No fix stated |
| FortiIsolator 2.1 | 2.1.0 → 2.1.2 | No fix stated |
| FortiIsolator 2.0 | 2.0.0 → 2.0.1 | No fix stated |
| FortiIsolator 1.2 | 1.2.0 → 1.2.2 | No fix stated |
| FortiIsolator | 1.1.0 | No fix stated |
| FortiIsolator | 1.0.0 | No fix stated |
Other CVEs of FortiIsolator
The 7 CVEs of FortiIsolator →
CVE-2024-33507
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…
7.0
High
CVE-2024-32124
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions…
4.0
Medium
CVE-2024-27779
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
6.3
Medium
CVE-2024-54024
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
7.0
High