Skip to content
fr Sign in
6.7 Medium

CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…

Description

A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiTester Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiTester

The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line… 7.8 High CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 6.8 Medium CVE-2022-33874 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical
Track this CVE