7.6
High
CVE-2022-35845 Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities…
Description
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester 7.1.0, 7.0 all versions, 4.0.0 through 4.2.0, 2.3.0 through 3.9.1 may allow an authenticated attacker to execute arbitrary commands in the underlying shell.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiTester | 7.1.0 | No fix stated |
| FortiTester | 7.0.0 | No fix stated |
| FortiTester | 4.2.0 | No fix stated |
| FortiTester 4.1 | 4.1.0 → 4.1.1 | No fix stated |
| FortiTester | 4.0.0 | No fix stated |
| FortiTester 3.9 | 3.9.0 → 3.9.1 | No fix stated |
| FortiTester | 3.8.0 | No fix stated |
| FortiTester 3.7 | 3.7.0 → 3.7.1 | No fix stated |
| FortiTester | 3.6.0 | No fix stated |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiTester 3.5 | 3.5.0 → 3.5.1 | No fix stated |
| FortiTester | 3.4.0 | No fix stated |
| FortiTester 3.3 | 3.3.0 → 3.3.1 | No fix stated |
| FortiTester | 3.2.0 | No fix stated |
| FortiTester | 3.1.0 | No fix stated |
| FortiTester | 3.0.0 | No fix stated |
| FortiTester | 2.9.0 | No fix stated |
| FortiTester | 2.8.0 | No fix stated |
| FortiTester | 2.7.0 | No fix stated |
| FortiTester | 2.6.0 | No fix stated |
| FortiTester | 2.5.0 | No fix stated |
| FortiTester 2.4 | 2.4.0 → 2.4.1 | No fix stated |
| FortiTester | 2.3.0 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiTester
The 7 CVEs of FortiTester →
CVE-2024-47569
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
4.2
Medium
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Medium
CVE-2023-40716
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…
6.5
Medium
CVE-2023-40715
A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an…
5.2
Medium